GRC Analyst: Risk, Compliance & Audit Readiness

MA COMPLIANCE PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

MA Compliance PTE. LTD. in Singapore seeks a GRC Analyst to work directly on client engagements, helping SME and start-up clients build, run and evidence their risk management and compliance programmes.

You will typically manage two to four concurrent engagements, conducting risk assessments, policy reviews and remediation tracking, and will be the primary GRC contact for clients. Experience with ISO 27001, PDPA, GDPR is a plus.

Qualifications

• Degree or equivalent qualification in Information Technology, Cybersecurity, Risk Management, Business or a related discipline.
• Professional

Responsibilities

• Plan and run risk assessments for client organisations—asset and process scoping, threat and vulnerability identification, likelihood and impact rating, and treatment planning.
• Facilitate Risk & Control Self-Assessment (RCSA) workshops with client business owners, and challenge risk ratings and control descriptions where the evidence does not support them.
• Build and maintain client risk registers, and track risks, issues, incidents and remediation actions through to closure.
• Define and monitor Key Risk Indicators (KRIs) for early visibility of exposures.
• Support clients on third‑party and vendor risk assessments, including due diligence questionnaires and contractual security requirements.
• Conduct gap assessments against ISO 27001, SOC 1/2/3,PDPA, GDPR and other standards, and translate findings into remediation roadmaps.
• Prepare clients for certification, surveillance and audits—evidence collection, control walkthroughs, internal audit support.
• Act as liaison with external auditors and coordinate management responses to findings.
• Perform internal audits of client ISMS and report results to management.
• Support PDPA obligations, including data inventories, DPIAs, consent and retention practices, and breach-notification readiness.
• Draft, tailor and review information security policies and supporting records.
• Establish governance routines for clients and maintain engagement documentation.

Skills

GRC

Risk management

Policy drafting

Education

Degree in IT/Cybersecurity/Risk Management

Tools

Power BI

JIRA

Excel

Job description

MA Compliance PTE. LTD. in Singapore seeks a GRC Analyst to work directly on client engagements, helping SME and start-up clients build, run and evidence their risk management and compliance programmes.

You will typically manage two to four concurrent engagements, conducting risk assessments, policy reviews and remediation tracking, and will be the primary GRC contact for clients. Experience with ISO 27001, PDPA, GDPR is a plus.