ISMS/ISO27001 Security Engineer (GRC Lead)

Randstad Singapore; Singapore; On-site; SGD 84,000 - 96,000; Full time

Job summary

Randstad Singapore is seeking a Cybersecurity Engineer (ISO 27001 / ISMS Rep / GRC) to lead the international ISMS framework, manage risk registers, and ensure audits pass for ISO 27001, SOC1/2, and related standards. The role combines governance with hands-on security engineering across SIEM, EDR, DLP, and cloud security.

You will collaborate with DevOps and R&D, architect secure-by-design principles, run PoCs for security tools, and handle client security questionnaires and contract reviews to

Qualifications

• Min 5 years in information security balancing IT operations with governance.
• Experience as ISO27001 ISMS representative and coordinating SOC1/SOC2 audits.
• Ability to interpret cloud security logs, SIEM alerts, EDR findings, and vulnerability scans.
• Familiarity with AWS or Alibaba Cloud and core security domains (IAM, encryption, network security).

Responsibilities

• Lead the international ISMS framework as primary representative and maintain risk registers and policies.
• Spearhead PoCs for tools like SIEM, PAM, and EDR to validate findings before deployment.
• Translate alerts and threat intel into actionable defense strategies for monitoring ecosystem.
• Direct incident response from drills to post-incident reviews and coordinate routine pentests.
• Collaborate with DevOps, R&D, and Infrastructure to embed secure-by-design practices.
• Serve as technical security authority, handling client questionnaires and reviewing contract clauses.

Skills

ISO27001

ISMS Rep

Cloud security logs

SIEM alerts

EDR findings

Vulnerability scans

AWS

Alibaba Cloud

SOC1/SOC2

DLP

CISSP

CISA

CISM

CCSP

Lead Implementer

Tools

PAM

Job description

Randstad Singapore is seeking a Cybersecurity Engineer (ISO 27001 / ISMS Rep / GRC) to lead the international ISMS framework, manage risk registers, and ensure audits pass for ISO 27001, SOC1/2, and related standards. The role combines governance with hands-on security engineering across SIEM, EDR, DLP, and cloud security.

You will collaborate with DevOps and R&D, architect secure-by-design principles, run PoCs for security tools, and handle client security questionnaires and contract reviews to