GRC Cybersecurity Leader | IT Risk & Compliance

SCIENTE; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

SCIENTE is seeking IT Security professionals focused on Governance, Risk and Compliance to join the Security Engineering & Architect team for Cybersecurity projects.

The role requires a degree in Computer Science or Information Security, 5+ years in IT security with GRC expertise, and strong knowledge of controls, standards, and auditing. You will work with vendors and internal teams on risk assessment and remediation, while keeping abreast of evolving threats.

Qualifications

• Degree in Computer Science, Information Security or Information Systems.
• 5+ years in IT security with strong IT GRC experience.
• Deep knowledge of internal controls, security frameworks, risk management and IT governance.
• Familiar with enterprise IT systems and components (apps, OS, databases, networks, cloud).
• Knowledge of IT controls standards – ISO 27001, NIST, OWASP, Cloud Security.
• Experience evaluating security tech with vendors and doing POCs.
• Keen interest in cyber security technologies (SIEM, NIDS, CASB, VMS, cyber-analytics).
• Strong analytical thinking and attention to detail.
• Excellent communication and interpersonal skills.

Responsibilities

• Act as SME on IT GRC and related policies and procedures.
• Help formulate and implement company-wide IT governance standards.
• Collaborate with development and vendor teams to implement IT risk assessment checklists and controls.
• Identify GRC KRIs and maintain IT Risk Register.
• Collaborate with stakeholders for risk management, mitigation, remediation.
• Liaise for IT GRC audits and remediation of issues.
• Stay current with cyber threat landscape and improve IT risk processes.
• Work with stakeholders to build a risk-aware culture.

Skills

IT GRC experience

Internal controls

Security frameworks

Cloud security

Vendor management

SIEM/NIDS/CASB/VMS

Analytical thinking

Communication skills

Auditing techniques

Regulatory awareness

CISSP/CISM/CRISC/CGEIT/CISA

Education

Bachelor's degree in Computer Science or Information Security

Tools

SIEM

NIDPS

CASB

VMS

Cyber analytics

Job description

SCIENTE is seeking IT Security professionals focused on Governance, Risk and Compliance to join the Security Engineering & Architect team for Cybersecurity projects.

The role requires a degree in Computer Science or Information Security, 5+ years in IT security with GRC expertise, and strong knowledge of controls, standards, and auditing. You will work with vendors and internal teams on risk assessment and remediation, while keeping abreast of evolving threats.