GRC Specialist

BIT Official; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

BIT is seeking a Compliance Program Specialist to help implement and maintain our regulatory framework across MAS and international standards. You will support certification activities (ISO 27001, ISO 27701, SOC 1/2) and work with cross-functional teams on risk assessments and due diligence.

You will gather evidence, track remediation, and assist with regulatory audits while communicating complex requirements clearly to technical and non-technical colleagues.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or a related technical discipline.
• At least 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role.
• Experience working in a licensed or regulated financial services environment (e.g., MAS).
• Hands-on experience with frameworks and standards such as MAS TRM Guidelines, NIST CSF, ISO 27001/27701, SOC 2, and GDPR.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus.
• Strong analytical skills, attention to detail, and the ability to manage multiple tasks and deadlines.
• Good written and verbal communication skills, able to explain compliance to both technical and non-technical colleagues.

Responsibilities

• Support the Compliance Program: implement and maintain our compliance framework including certification activities.
• Assist with Risk Management & Assurance: support third-party risk management and due diligence responses.
• Support Control Assessment & Evidence Management: collect evidence and track remediation through to closure.
• Contribute to Process Improvement: identify gaps and adapt controls to evolving requirements.
• Provide Stakeholder Support: explain compliance requirements to technical and business teams and support security reviews for new products.

Skills

Security Risk Management

Governance & Compliance

IT Audit

Regulatory Examinations

Vendor Risk Management

ISO 27001

Education

Bachelor’s degree in Computer Science, Information Systems

Tools

ISO 27001 Lead Implementer/Auditor

CISA

CISSP

Job description

BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group. Headquartered in Singapore and founded in 2019, BIT bridges traditional finance and digital assets through governance-driven financial services and technology.

The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume. BIT offers services including custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets (RWA), serving institutional and professional investors globally.

BIT Group entities maintain a licensed and regulated footprint across Singapore, Hong Kong, Switzerland, the United Kingdom, the United States and Bhutan.

For more information, visit www.bit.com

Why Join Us:

At BIT, we tackle complex problems as a team. We encourage openness and promote transparency, respect, and inclusivity. Every team member is valued and has a voice that can be heard. We are always in search of intellectually curious and entrepreneurial individuals who are keen on making an impact in the crypto ecosystem and in building a better product for the next one billion users.

Job Responsibilities:

• Compliance Program Support: Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2. Prepare and maintain policies, procedures, and control documentation.
• Risk Management & Assurance: Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups. Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits.
• Control Assessment & Evidence Management: Assist with internal and external control assessments and control testing. Collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure.
• Process Improvement: Help identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team.
• Stakeholder Support: Work with technical and business teams to explain compliance requirements, gather the information needed for assessments, and support security reviews for new products and business initiatives.

Job Requirements:

• Bachelor’s degree in Computer Science, Information Systems, or a related technical discipline.
• A minimum of 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role.
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS).
• Hands-on experience supporting compliance work against frameworks and standards such as MAS Technology Risk Management (TRM) Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus.
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines.
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Policy. https://www.bit.com/privacy-candidate