GRC Consultant

PCS SECURITY PRIVATE LIMITED; Singapore; In loco; SGD 90.000 - 140.000; Tempo pieno

Descrizione del lavoro

PCS Security Private Limited is seeking an experienced Cybersecurity Consultant to conduct risk assessments, develop governance frameworks, and guide clients on security controls within regulatory requirements in Singapore.

You will work with customers to understand business needs, perform third-party risk reviews, and lead incident response initiatives while coordinating across IT, customer teams, and leadership.

Competenze

• Possess Diploma or Degree in CyberSecurity, Information Technology or related field.
• At least 6-8 years of working experience in cyber security consultancy with relevant experience on security governance.
• Familiarity with ISO 27001, NIST CSF, CIS Controls and Singapore regulations.

Mansioni

• Conduct cybersecurity risk assessments, compliance reviews and security gap analysis.
• Develop and review cybersecurity policies, standards, procedures and governance frameworks.
• Assess compliance against ISO 27001, NIST CSF, PDPA and Singapore regulations.
• Identify cybersecurity risks, recommend mitigation measures and develop remediation plans.
• Conduct cybersecurity maturity assessments and recommend security improvement roadmaps.
• Support internal and external security audits, including tracking and closure of findings.
• Perform third-party and supply chain cybersecurity risk assessments.
• Provide cybersecurity advisory and consultancy services to customers.
• Prepare assessment reports, risk registers, management presentations and project deliverables.
• Lead high-severity security incidents, coordinating functional technical response across IT teams,customer-facing teams and executive leadership.
• Develop and execute incident response simulations to validate response plans, streamline customer communications, standardize executive reporting and reduce MTTR.
• Engage customers and stakeholders to understand business requirements and recommend appropriate cybersecurity controls

Conoscenze

Governance

Risk management

Compliance frameworks

Stakeholder management

Analytical skills

Documentation

Communication

Formazione

Cybersecurity/IT degree

Descrizione del lavoro

Pre-requisition

• Possess Diploma or Degree in CyberSecurity, Information Technology or related field.
• At least 6 - 8 years of working experience in cyber security consultancy with relevant experience on security governance

JobDescription:

• Conduct cybersecurity risk assessments, compliance reviews and security gap analysis.
• Develop and review cybersecurity policies, standards, procedures and governance frameworks.
• Assess compliance against industry standards and regulatory requirements, including ISO 27001, NIST CSF,PDPA and applicable Singapore cybersecurity regulations.
• Identify cybersecurity risks,recommend mitigation measures and develop remediation plans.
• Conduct cybersecurity maturity assessments and recommend security improvement roadmaps.
• Support internal and external security audits, including tracking and closure of findings.
• Perform third-party and supply chain cybersecurity risk assessments.
• Provide cybersecurity advisory and consultancy services to customers.
• Prepare assessment reports, risk registers, management presentations and project deliverables.
• Lead high-severity security incidents, coordinating functional technical response across IT teams,customer-facing teams and executive leadership.
• Develop and execute incident response simulations to validate response plans, streamline customer communications, standardize executive reporting and reduce MTTR.
• Engage customers and stakeholders to understand business requirements and recommend appropriate cybersecurity controls

TechnicalSkill Sets:

• Must Have
• Knowledge of cybersecurity governance, risk management and compliance frameworks.
• Familiarity with ISO 27001,NIST CSF, CIS Controls and relevant Singapore cybersecurity regulations.
• Strong analytical,documentation, communication and stakeholder management skills.

• Good to Have
• Experience in cybersecurity assessments, security audits or GRC consultancy is preferred
• Relevant certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 are advantageous.