GRC Cyber - Cloud

Cari; Singapore; On-site; SGD 150,000 - 190,000; Full time

Benefits offered by this job

Certification sponsorship

Performance-based incentives

Career progression opportunities

Job summary

Michael Page Singapore is seeking a Senior Cloud Security Governance Lead to drive security governance across cloud environments and collaborate with engineering and DevOps to embed controls into deployment pipelines.

The role emphasizes risk assessments, audits, and regulatory compliance (ISO 27001, NIST CSF, SOC 2), with strong emphasis on IaC, CI/CD security, and container platforms. Leadership, stakeholder management, and clear risk communication are essential.

Qualifications

• 6+ years of cybersecurity experience, with cloud security focus.
• Experience securing cloud platforms (AWS, Azure, GCP).
• Solid knowledge of ISO 27001, NIST CSF, SOC 2 or equivalent.
• Hands-on risk assessments, audit support and compliance management.
• Familiarity with Infrastructure-as-Code, CI/CD security and container platforms.
• Strong communication to explain risks to business leaders.
• Relevant certifications (CISSP, CISM, CCSP, AWS/Azure Security) advantageous.

Responsibilities

• Develop and enhance cybersecurity governance frameworks, policies and standards across cloud environments.
• Lead cloud risk assessments, control reviews and compliance initiatives.
• Partner with engineering and DevOps to embed security controls into cloud pipelines.
• Oversee cloud security monitoring, incident governance and remediation activities.
• Support internal and external audits through documentation and stakeholder engagement.
• Evaluate third-party and vendor security risks and ensure regulatory compliance.
• Provide security leadership, mentoring and guidance on cloud security practices.

Skills

Cloud security governance

Risk assessment

Stakeholder management

Audit & compliance

Education

CISSP, CISM, CCSP or AWS/Azure security certifications

Tools

AWS

Azure

GCP

Job description

• Drive cloud governance and cybersecurity initiatives
• Blend hands‑on security with strategic risk management

About Our Client

Our client is a fast-growing technology-driven organisation delivering digital transformation, cloud and technology solutions to enterprise customers across the region.
With a strong focus on innovation, security, and operational excellence, they foster a collaborative culture where security is embedded into technology delivery and employees are encouraged to continuously develop their skills and expertise.

Job Description

• Develop and enhance cybersecurity governance frameworks, policies and standards across cloud environments.
• Lead cloud risk assessments, control reviews and compliance initiatives aligned to recognised industry frameworks.
• Partner with engineering and DevOps teams to embed security controls into cloud infrastructure and deployment pipelines.
• Oversee cloud security monitoring, incident governance and remediation activities to strengthen organisational resilience.
• Support internal and external audits through control documentation, evidence collection, and stakeholder engagement.
• Evaluate third-party and vendor security risks, ensuring compliance with organisational and regulatory requirements.
• Provide security leadership, mentoring and guidance on cloud security best practices, risk management, and governance.

The Successful Applicant

• More than 6 years of cybersecurity experience, with strong exposure to cloud security and governance.
• Experience securing cloud platforms such as AWS, Azure and/or GCP.
• Strong understanding of cybersecurity frameworks including ISO 27001, NIST CSF, SOC 2, or similar.
• Hands‑on experience with risk assessments, audit support, and compliance management.
• Familiarity with cloud technologies, Infrastructure-as-Code, CI/CD security, and container platforms.
• Strong stakeholder management skills with the ability to communicate technical risks to business leaders.
• Relevant certifications such as CISSP, CISM, CCSP, AWS Security, Azure Security, or equivalent are advantageous.

What's on Offer

• Opportunity to influencecybersecurity strategy and cloud governance at an enterprise level.
• Exposure to modern cloud technologies and large-scale transformation initiatives.
• Structured training and certification sponsorship.
• Collaborative and security-focused culture with strong leadership support.
• Competitive remuneration package with performance-based incentives.
• Clear career progression into senior cybersecurity leadership positions.