GRC Security Engineer: Compliance & Risk Lead

Zenith Infotech (S) Pte Ltd; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Zenith Infotech (S) Pte Ltd is seeking a Security & Compliance Validator to ensure enterprise applications and databases meet IT policies across data centers and cloud environments. You will guide teams, implement configurations, and support remediation efforts.

The role prefers 2+ years in security/compliance tools, with certifications like CISA, CISSP, or CISM being advantageous. Experience with IT audits and ICT policy familiarity is beneficial.

Qualifications

• Minimum 2 years of experience in security and compliance technologies such as vulnerability assessment or logs management.
• Certifications in security/compliance (e.g., CISA, CISSP, CISM) are advantageous.
• Familiarity with IT compliance standards across Windows, Linux, and cloud environments is advantageous.
• Experience in IT audit is advantageous.
• Familiarity with IM8 or equivalent ICT policies is advantageous.

Responsibilities

• Validate security and compliance solutions for enterprise applications and databases in data centers and cloud services according to IT policies.
• Provide guidance and hands-on implementation in design, configuration and troubleshooting of logs, patch, vulnerability and configuration management using enterprise platforms.
• Handle IT security remediation and IT policy implementation.

Skills

Security and compliance experience

Vulnerability assessment

Logs management

IT policy implementation

IT audit

IM8 ICT policies familiarity

Education

CISA

CISSP

CISM

CRISC

CSA

Tools

Vulnerability assessment tools

Logs management platforms

Enterprise security solutions

Job description

Zenith Infotech (S) Pte Ltd is seeking a Security & Compliance Validator to ensure enterprise applications and databases meet IT policies across data centers and cloud environments. You will guide teams, implement configurations, and support remediation efforts.

The role prefers 2+ years in security/compliance tools, with certifications like CISA, CISSP, or CISM being advantageous. Experience with IT audits and ICT policy familiarity is beneficial.