GRC & InfoSec Specialist

Logicalis Group; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Logicalis Group is recruiting a Governance, Risk, and Compliance (GRC) Specialist to join our APAC team in Singapore. You will oversee ISMS, risk management, and regulatory compliance across Singapore and Malaysia, advising IT and business units on policy, risk, and controls.

You will coordinate audits, track remediation, and drive awareness through training and stakeholder engagement, contributing to a robust GRC posture for a diverse client base.

Qualifications

• Bachelor’s degree in Information Security or related field and 3–5 years experience in GRC, IT risk, IT audit, information security or compliance.
• Solid knowledge of ISO 27001/27701/42001, CREST, and at least one framework such as NIST CSF or COBIT.
• Hands-on risk assessments, control testing and audit coordination with cross‑border teams.

Responsibilities

• Maintain and operationalise ISMS, PIMS, and AIMS per ISO standards and regulatory requirements.
• Manage IT risk registers, risk assessments, and remediation tracking across functions.
• Coordinate internal and external audits, including cybersecurity audits and evidence gathering.
• Support governance, policy, and control testing to ensure regulatory alignment in SG and MY.
• Monitor compliance with frameworks such as Cyber Trust Mark and Data Protection regulations.
• Deliver security awareness and reporting to management with clear risk insights.

Skills

GRC

IT risk

IT audit

Information security

Compliance

Education

Bachelor's degree in Information Security

Tools

AuditBoard

DiligentOne

Risk4All

AON CyQu

Microsoft 365

Azure

GWS

GCP

Job description

Logicalis Group is recruiting a Governance, Risk, and Compliance (GRC) Specialist to join our APAC team in Singapore. You will oversee ISMS, risk management, and regulatory compliance across Singapore and Malaysia, advising IT and business units on policy, risk, and controls.

You will coordinate audits, track remediation, and drive awareness through training and stakeholder engagement, contributing to a robust GRC posture for a diverse client base.