GRC & IT Risk Specialist | ISO Standards & Compliance

Logicalis Singapore Pte Ltd; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Logicalis Singapore Pte Ltd is seeking an experienced GRC specialist to lead governance, risk and compliance across Singapore and Malaysia. You will manage ISMS/ISO frameworks, conduct risk assessments, coordinate audits, and monitor third‑party risk and regulatory changes.

You will also support incident response, business continuity planning and security awareness initiatives while reporting to management on GRC status. This role requires collaboration across regions and departments.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, IT, Risk Management or related field.
• 3–5 years in GRC, IT risk, IT audit, information security or compliance roles.
• Solid knowledge of ISO 27001/27701/42001 and at least one framework such as NIST CSF or COBIT.
• Hands-on experience with risk assessments, control testing and audit coordination.
• Familiarity with data protection regulations in Singapore and Malaysia PDPA.

Responsibilities

• Maintain and operationalise ISMS, PIMS and AIMS in line with ISO standards.
• Manage IT risk registers, risk assessments and treatment plans.
• Coordinate audits and track remediation to closure.
• Oversee third‑party risk assessments and vendor agreements.
• Support incident response, BC/DR planning, and regulatory reporting.
• Deliver security awareness and management reporting on GRC posture.

Skills

GRC management

Policy & controls

Risk assessment

Audit coordination

Regulatory compliance

Education

Bachelor's degree in Information Security or related field

Tools

AuditBoard

DiligentOne

Risk4All

Job description

Logicalis Singapore Pte Ltd is seeking an experienced GRC specialist to lead governance, risk and compliance across Singapore and Malaysia. You will manage ISMS/ISO frameworks, conduct risk assessments, coordinate audits, and monitor third‑party risk and regulatory changes.

You will also support incident response, business continuity planning and security awareness initiatives while reporting to management on GRC status. This role requires collaboration across regions and departments.