GRC Engineer

GovTech Singapore; Singapore; On-site; SGD 120,000 - 170,000; Full time

Benefits offered by this job

Flexible work

Leave benefits

Wellness programs

Inclusive workplace

Job summary

GovTech Singapore is seeking a senior GRC engineer to embed governance, risk, and compliance into modern IT delivery. You will bridge GRC and engineering, enabling AI-enabled systems with practical, scalable controls and automated assurance.

You’ll work with product and platform teams to align governance initiatives with roadmaps, applying systems thinking and risk-based approaches to accelerate secure, compliant technology deployment.

Qualifications

• 8+ years of experience in GRC or engineering with governance focus.
• Ability to embed GRC into product and engineering workflows.
• Strong understanding of DevSecOps practices and automation.

Responsibilities

• Work with operational units to understand governance needs before implementing controls.
• Apply systems thinking to how controls interact across processes and teams.
• Design and embed GRC practices into system development lifecycles and DevOps workflows.
• Translate regulatory requirements into practical, automated solutions with stakeholder input.
• Analyze delivery workflows to identify risk and control friction.

Skills

GRC embedding into systems

Systems thinking

DevSecOps / CI/CD

Policy-as-Code

Stakeholder management

Tools

CI/CD pipelines

Infra as-Code

Cloud fundamentals

Job description

GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.

At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.

Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!

Learn more about GovTech at tech.gov.sg.

What you will be working on

We are seeking a dynamic individual to be part of the journey in transforming governance, risk, and compliance (GRC) from a traditional oversight function into an integrated and scalable capability that keeps in step with modern IT delivery practices. This role bridges GRC and engineering. The objective is not to become a software engineer who works in compliance, but to become an effective practitioner who leverages engineering thinking to embed GRC seamlessly into DevOps practices and prepare frameworks for emerging AI-driven systems. By bridging regulatory requirements with technical innovation, you will help position Singapore at the forefront of responsible digital government, enabling faster and safer technology deployment that directly benefits citizens in our increasingly AI-integrated future.

Responsibilities

• Work directly with operational units to understand their challenges, constraints, and needs within their operating context before implementing control requirements.
• Apply systems thinking to understand how controls interact across processes, platforms, and teams, moving from “this is the control requirement” to “this is how it should operate in practice.”
• Design and embed GRC practices into system and process development from inception, ensuring governance mechanisms feel natural within product and engineering workflows rather than burdensome.
• Translate GRC requirements into practical, actionable solutions with stakeholder experience as a primary consideration, ensuring appropriate governance is in place without hindering operational velocity.
• Analyse delivery workflows, decision latency, and control friction across digital products and platforms to identify systemic risk, operational complexity, and value leakage.
• Architect reusable control patterns and implement real-time risk and control telemetry using data pipelines, APIs, and analytics platforms to enable continuous automated monitoring and assurance-by-design.
• Replace retrospective compliance validation with embedded, continuous assurance mechanisms that demonstrate measurable risk outcomes.
• Implement governance for AI-enabled systems, including model lifecycle controls, decision accountability, data provenance, and human-in-the-loop assurance.
• Champion the cultural shift toward proactive GRC engineering. Manage key stakeholder relationships across product engineering teams, legacy policy units, and executive leadership to align governance initiatives with broader product roadmaps.

What we’re looking for

8+ years' experience with either of the two backgrounds:

• GRC practitioner who understands how GRC can be embedded into systems and workflows to make it practical, operational and scalable; OR
• Former engineer (security, DevOps, platform, or similar) who are interested in applying structured, systems thinking to modernize GRC processes.

Core Competencies

• Systems thinking across business, technology, and risk.
• Structured problem-solving.
• Pragmatic controls design.
• Comfort operating in imperfect integration environments.
• Strong translation skills; clear communication between deep-technical engineering teams, non-technical stakeholders, and policy makers.
• Strong leadership capability to drive systemic change and influence without relying solely on direct authority.

Technical Literacy

• Strong foundation in GRC principles with practical understanding of how they apply in modern technology environments.
• Solid grasp of cloud fundamentals and DevSecOps practices (e.g., CI/CD, Infra as-Code, Policy-as-Code).
• Familiarity with Product and Platform operating models.
• Basic scripting or automation experience would be advantageous.

Why This Role Exist

GRC Engineering embeds GRC into systems, measures outcomes continuously, and scales without increasing friction. If you believe GRC should be engineered into how work is done instead of layering on top of it, we would like to speak with you.

What we offer you

GovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe that diversity is the foundation to innovation.

Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programs.

We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.

Learn more about life inside GovTech at go.gov.sg/GovTechCareers.

Stay connected with us on social media at go.gov.sg/ConnectWithGovTech