GRC Cybersecurity Lead: Risk, Compliance & Security

Sciente International Pte Ltd; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

Sciente International Pte Ltd in Singapore is seeking IT Security professionals with a strong focus on Governance, Risk and Compliance to join the Security Engineering & Architect team in implementing Cybersecurity projects.

The role emphasizes IT GRC expertise, controls, and collaboration with vendors to assess security technologies and perform POCs, with exposure to SIEM, NIDPS and cloud security.

Qualifications

• Degree in Computer Science, Information Security or Information Systems.
• At least 5 years in IT security with strong IT GRC experience.
• Solid knowledge of internal controls, security frameworks and risk management.
• Familiar with ISO 27001, NIST, OWASP; experience with vendor security tech and POC.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC).
• Contribute to company-wide IT governance standards and regulatory compliance.
• Collaborate with development and vendors to implement risk assessment checklists and IT risk controls.
• Maintain IT Risk Register and identify KRIs with stakeholders.
• Work with stakeholders on risk management, mitigation and remediation measures.
• Coordinate IT GRC audits and ensure timely remediation of issues.
• Keep abreast of cyber threat landscape to improve IT risk processes.

Skills

GRC

IT Governance

Risk Management

Security Auditing

SIEM

Communication

Interpersonal Skills

Education

Bachelor's degree in Computer Science / Information Security / Information Systems

Tools

SIEM

NIDPS

CASB

VMS

Cyber-analytics

Job description

Sciente International Pte Ltd in Singapore is seeking IT Security professionals with a strong focus on Governance, Risk and Compliance to join the Security Engineering & Architect team in implementing Cybersecurity projects.

The role emphasizes IT GRC expertise, controls, and collaboration with vendors to assess security technologies and perform POCs, with exposure to SIEM, NIDPS and cloud security.