GRC Specialist — ISO 27001 & Risk Management

Logicalis Asia Pacific; Singapore; On-site; SGD 80,000 - 130,000; Full time

Job summary

Logicalis Asia Pacific is seeking a GRC and IT risk specialist to lead governance, risk and compliance across Singapore and Malaysia. You will maintain ISMS, manage audits, and coordinate with legal, HR and regional teams to ensure regulatory alignment.

The role requires 3–5 years in GRC, IT risk, or security compliance, with knowledge of ISO 27001/27701/42001, PDPA, and hands-on risk assessments and audit coordination. Certifications such as CISA/CRISC are a plus.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management or a related field.
• 3 to 5 years of combined experience across GRC, IT risk, IT audit, information security or compliance roles.
• Solid working knowledge of ISO 27001, ISO 27701 and ISO42001, CREST and at least one other framework such as NIST CSF or COBIT.
• Hands-on experience running risk assessments, control testing and audit coordination.
• Working knowledge of data protection regulations, including Singapore and Malaysia PDPA.

Responsibilities

• Governance and Frameworks: maintain policies, standards, procedures and controls (ISO 27001/27701/42001).
• IT Risk Management: maintain risk register, conduct risk assessments and monitor trends.
• Compliance and Certifications: manage ISO certifications, CTM and DPTM compliance.
• Controls and Audit: document and test IT controls, coordinate audits and remediation.
• Third-Party Risk: conduct vendor due diligence and contract reviews.
• Incident and BCM: support incident response and business continuity planning.
• Awareness and Reporting: deliver security awareness training and report GRC status.

Skills

Communication

Project management

Independent worker

Stakeholder collaboration

Education

Bachelor's degree in Information Security, Cybersecurity, Computer Science, IT, Risk Management

Tools

AuditBoard

DiligentOne

Risk4All

AON CyQu

Cloud platforms (M365, Azure, GWS, GCP)

Job description

Logicalis Asia Pacific is seeking a GRC and IT risk specialist to lead governance, risk and compliance across Singapore and Malaysia. You will maintain ISMS, manage audits, and coordinate with legal, HR and regional teams to ensure regulatory alignment.

The role requires 3–5 years in GRC, IT risk, or security compliance, with knowledge of ISO 27001/27701/42001, PDPA, and hands-on risk assessments and audit coordination. Certifications such as CISA/CRISC are a plus.