GRC Manager: ISO, Risk & Compliance Lead

Logicalis Asia Pacific; Singapore; Sur place; SGD 80 000 - 120 000; Plein temps

Résumé du poste

Logicalis Asia Pacific is seeking a Governance, Risk and Compliance (GRC) professional to lead IT risk, policy development, and assurance across Singapore and Malaysia. You will drive ISO 27001/27701/42001 compliance, coordinate audits, and manage third‑party risk in a regional role within a global organization.

You will partner with Legal, HR and IT to improve controls, reporting, and awareness, delivering stakeholder‑friendly risk insights and remediation plans across the APAC footprint.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management or a related field.
• 3–5 years of experience across GRC, IT risk, IT audit, information security or compliance roles.
• Solid working knowledge of ISO 27001, ISO 27701 and ISO42001, CREST and at least one other framework (NIST CSF or COBIT).
• Hands-on experience running risk assessments, control testing and audit coordination.
• Working knowledge of data protection regulations in Singapore and Malaysia (PDPA).

Responsabilités

• Governance and Frameworks: maintain and operationalise the ISMS, PIMS and AIMS including policies, standards, procedures and controls. Ensure documentation is current and aligned with standards.
• Compliance and Certifications: manage ISO certifications for Singapore and Malaysia; support CTM and DPTM; monitor regulatory developments.
• Controls and Audit: document and test IT controls; coordinate internal and external audits; track findings and remediation.
• Third-Party Risk: conduct vendor risk assessments and due diligence; review client contracts and vendor agreements.
• Incident and Business Continuity Support: assist incident response, investigations, and BC/DR planning.
• Awareness, Reporting and Stakeholder Engagement: deliver security awareness training; report on GRC status; collaborate across departments and regions.

Connaissances

GRC

IT risk

Audit coordination

Policy development

Stakeholder management

Formation

Bachelor's degree in Information Security / Cybersecurity / IT

Outils

AuditBoard

DiligentOne

Risk4All

AON CyQu

Description du poste

Logicalis Asia Pacific is seeking a Governance, Risk and Compliance (GRC) professional to lead IT risk, policy development, and assurance across Singapore and Malaysia. You will drive ISO 27001/27701/42001 compliance, coordinate audits, and manage third‑party risk in a regional role within a global organization.

You will partner with Legal, HR and IT to improve controls, reporting, and awareness, delivering stakeholder‑friendly risk insights and remediation plans across the APAC footprint.