Head of Cyber GRC & Zero Trust Strategy

JJ CONSULTING SERVICES; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

JJ Consulting Services is seeking a senior GRC leader to design and implement a strategic cybersecurity governance, risk, and compliance framework in Singapore. You will embed risk management into digital systems, turning GRC into a business enabler across IT, Cloud, and OT environments.

Responsibilities include establishing dynamic risk registers, guiding senior management on risk, developing standardized TRA for Cloud, Web Apps and OT/ICS, and leading a Zero Trust program with identity-based

Qualifications

• 10–12 years in Cybersecurity GRC or Security Architecture.
• Experience across IT and Cloud; OT/ICS is a plus.
• Familiar with NIST and ISO 27001 standards.
• Ability to translate technical risk into business terms.

Responsibilities

• Establish and maintain dynamic security risk registers reflecting threats and project statuses across agencies.
• Lead senior management risk discussions by translating complex technical risks into clear business impacts to guide resource prioritization.
• Develop and implement a consistent risk analysis framework that enables agencies to take calculated risks for innovation.
• Create and uphold unified TRA standards for Cloud, Web Applications, and OT/ICS domains.
• Develop SOPs for identifying critical information assets and mapping threat vectors.
• Define and enforce standardized security controls that mitigate identified risks beyond baseline compliance.
• Lead the development and execution of a Zero Trust Framework emphasizing identity-based security and micro-segmentation.
• Provide governance, risk, and compliance advisory during the design of high-impact systems to ensure security-by-design.
• Evaluate and recommend security technologies that address specific risks and maintain defense relevance against evolving threats.
• Establish frameworks for managing third-party and software supply chain risks, including assessing cyber-resilience of vendors and dependencies.
• Drive agencies toward continuous compliance readiness and proactive audit preparation.
• Oversee closure of audit findings by ensuring substantive technical fixes rather than superficial measures.
• Partner with stakeholders to foster a proactive risk management culture through education and advocacy.
• Monitor evolving threat actor tactics and technology trends to ensure defenses remain current and effective.

Skills

Cybersecurity GRC

Information Security Risk Management

Security Architecture

Zero Trust

Cloud security

OT/ICS security

Threat modeling

MITRE ATT&CK mapping

Stakeholder management

Policy compliance (NIST/ISO 27001)

Education

CISM

CRISC

CISSP

OSCP/OSWE

Tools

SIEM

CSPM

CWPP

CASB

EDR

IAM

Firewalls

Secrets management

Job description

JJ Consulting Services is seeking a senior GRC leader to design and implement a strategic cybersecurity governance, risk, and compliance framework in Singapore. You will embed risk management into digital systems, turning GRC into a business enabler across IT, Cloud, and OT environments.

Responsibilities include establishing dynamic risk registers, guiding senior management on risk, developing standardized TRA for Cloud, Web Apps and OT/ICS, and leading a Zero Trust program with identity-based