GRC Specialist — ISO 27001/27701 & PDPA Compliance

Logicalis; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Logicalis Asia Pacific is seeking a Governance, Risk and Compliance (GRC) professional to support IT governance, risk assessment, and compliance programs across Singapore and Malaysia. You will review policies, assist audits, and help maintain ISO 27001/27701 standards within the group.

The ideal candidate has 1–2 years in GRC, a bachelor’s degree in information security or related field, and familiarity with PDPA and risk frameworks.

Qualifications

• 1–2 years of experience in Governance, Risk and Compliance (GRC) roles.
• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or related field.
• Familiarity with ISO 27001, ISO 27701 and PDPA.
• Knowledge of risk management frameworks and vulnerability assessment tools.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk Management and Compliance (GRC) policies and procedures.
• Support the review, maintenance and updating of documents to align with ISO 27001 and ISO 27701 requirements.
• Regularly review and manage ISPMS documentation to reflect changes in compliance standards.
• Work with Legal, HR to gather necessary information and ensure consistency across documentation.
• Assist in internal and external audits by providing required documentation.
• Liaise with departments across Singapore and Malaysia to ensure effective document control and compliance.
• Support ISO 27001 requirements for all entities and ensure compliance.
• Assist in uploading required information to the GRC platform.
• Support Group cybersecurity internal audit requirements.
• Develop and deliver training to staff on information security-related training.

Skills

GRC experience

ISO 27001 knowledge

PDPA knowledge

Risk assessment

Stakeholder collaboration

Education

Bachelor's degree in Information Security

Tools

GRC platform

Job description

Logicalis Asia Pacific is seeking a Governance, Risk and Compliance (GRC) professional to support IT governance, risk assessment, and compliance programs across Singapore and Malaysia. You will review policies, assist audits, and help maintain ISO 27001/27701 standards within the group.

The ideal candidate has 1–2 years in GRC, a bachelor’s degree in information security or related field, and familiarity with PDPA and risk frameworks.