GRC Consultant

Infinite-Computer-Solutio; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Infinite-Computer-Solutio is seeking a seasoned IT Governance and Risk professional to develop cybersecurity policies, risk assessments and compliance programs aligned with financial industry standards.

You will collaborate with stakeholders, coordinate audits, and streamline data collection, control testing and reporting while mitigating cybersecurity risks and ensuring regulatory adherence.

Qualifications

• Experience in IT Governance and risk management within financial/payment domains.
• Familiarity with MAS and CCOP or equivalent regulatory frameworks.
• Experience with IT/cyber operations, governance, audit or regulatory compliance.

Responsibilities

• Develop and maintain cybersecurity policies, risk assessments and compliance programs for various frameworks.
• Collaborate with stakeholders, coordinate audits, and streamline data collection, control testing and reporting.
• Identify and mitigate cybersecurity risks and ensure adherence to regulations and standards.
• Provide technical guidance to align security with business objectives.

Skills

IT Governance

Risk Management

Regulatory Requirements

NIST Framework

ISO 27001

PS Act

CGEIT

CISA

CISM

CISSP

CRISC

Education

CGEIT Certification

CISA Certification

CISM Certification

CISSP Certification

CRISC Certification

Job description

Key Responsibilities

• Developing and maintaining cybersecurity policies, risk assessments and compliance programs for various frameworks.
• Collaborate with various stakeholders, coordinate compliance audits and to streamline data collection, control testing and reporting.
• Identify and mitigate cybersecurity risks.
• Ensure adherence to regulations and standards.
• Provide technical guidance to align security with business objectives

Required Skills & Qualification

• At least3-7 years of experience in IT Governance or risk management with 3 to 5 years of relevant experience specifically in IT Governance and/or Risk management.
• Candidates from financial/payment industry and familiar with MAS & CCOP regulatory requirements or equivalent are preferred.
• Candidates with experience in IT/Cyber operations/governance/audit/regulatory compliance who are keen to explore a career in IT Governance and risk management are welcome to apply.
• Strong knowledge of regulatory requirements, IT Governance practices, operations risk management processes and industry trends/practices (e.g. NIST framework, MAS requirements, ISO 27001 standard, PS Act, etc.).
• Certifications such as CGEIT, CISA, CISM, CISSP, CRISC or any relevant certification is an advantage.
• Good project management, time management and problem-solving skills. An eye for details, and able to work well under pressure and respond to tight deadlines.
• Proactive team player and able to work independently with minimal supervision.
• Good communication, presentation and business writing skills.
• Possess a strong control and process management mindset, able to perform deep-dive investigations and crunching for control and process issues.