IT Compliance Analyst - GRC

MANPOWER STAFFING SERVICES (SINGAPORE) PTE LTD; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

MANPOWER STAFFING SERVICES (SINGAPORE) PTE LTD is seeking an experienced IT Governance & Compliance professional to manage day-to-day IT governance, risk, audits, and ISO certification activities across the Group, collaborating with the CTO, D&T teams and corporate functions. The role also supports AI governance and adoption, training programmes, and overall departmental operations.

The candidate will coordinate internal/external IT audits, maintain the risk register, help review IT proposals,

Qualifications

• Degree in Information Technology, Computer Science, Information Systems, Business, Risk Management or a related discipline.

Responsibilities

• Governance, Risk, Audit & Compliance: maintain IT governance framework, policies, trackers and governance calendar; coordinate cybersecurity governance activities and security requirements in projects.
• Coordinate internal/external IT audits and ISO/IEC 27001 and Cyber Trust Mark certification activities; manage evidence collection and ISMS documentation.
• Support Enterprise Risk Management, maintain risk register and follow up on treatment plans.
• Assist in reviews of IT proposals and governance papers for information, risks and approvals.
• AI Governance: support AI governance framework, AI policy, and assess AI use cases against governance requirements.
• Coordinate AI risk, security, privacy and compliance assessments and track related actions.
• Budget, Procurement & Management Reporting: support annual D&T CAPEX/OPEX budgeting, track expenditures and cost allocations; assist procurement documentation.
• Department Operations & Engagement: coordinate meetings, training, events and attendance tracking.

Skills

IT governance

Risk management

IT audit

Cybersecurity governance

Stakeholder management

Budget management

MS Office

Education

IT/CS/IS degree

Business degree

IT Governance cert

Job description

Role Overview

This role supports the day-to-day management of IT Governance, Cyber Governance, Risk & Compliance, Audit, ISO certification, AI Governance and IT Budget activities across the Group. Working closely with the Senior Manager of IT Governance, the CTO, D&T teams and corporate functions, the role coordinates governance requirements, audits, risk management, financial activities and management reporting, while also supporting AI governance and adoption, IT training programmes, and departmental operations.

Key Responsibilities

Governance, Risk, Audit & Compliance

• Support the implementation and maintenance of the Group's IT Governance framework, policies and procedures, including maintaining trackers, the governance calendar, and following up on outstanding actions.
• Coordinate cybersecurity governance activities, reviews and assessments, and support the consideration of security requirements in technology projects.
• Coordinate internal/external IT audits and annual ISO/IEC 27001 and Cyber Trust Mark certification activities, including evidence collection, ISMS documentation and follow-up on findings.
• Support the Group's Enterprise Risk Management process for D&T, including maintaining the risk register and following up with risk owners on treatment plans.
• Assist in reviewing IT proposals and governance papers to ensure required information, risks and approvals are complete.

AI Governance

• Support implementation and administration of the Group's AI Governance framework, including maintaining the AI Policy and reviewing AI use cases against governance requirements.
• Coordinate AI risk, security, privacy and compliance assessments, and track related risks, actions and approvals.
• Support AI awareness and adoption activities, including coordinating training, workshops and Lunch & Learn sessions with the AI Centre of Excellence.

Budget, Procurement & Management Reporting

• Support annual D&T CAPEX/OPEX budget planning, consolidate inputs, and track expenditure, commitments and cost allocations, liaising with Finance as needed.
• Support IT procurement and governance documentation, ensuring submissions include appropriate business justification, financials and risk information.
• Draft and review management papers, memoranda and approval submissions, consolidating multi-stakeholder inputs into clear, accurate updates for the CTO and senior management.

Department Operations & Engagement

• Coordinate D&T departmental meetings, training programmes and Lunch & Learn sessions, including scheduling, logistics and attendance tracking.
• Support planning and execution of department events and employee engagement activities, including budget tracking.

Requirements

• Education: Degree in Information Technology, Computer Science, Information Systems, Business, Risk Management or a related discipline.
• Professional qualifications in IT Governance, Cybersecurity, Risk or Audit.
• Experience: Approximately 5-8 years in IT Governance, IT Risk, IT Audit, Cybersecurity Governance, IT Management or a related technology function.
• Experience: Experience coordinating audits, ISO/IEC 27001, Cyber Trust Mark or IT compliance activities.
• Experience: Experience in budget tracking, management reporting and preparing business/approval papers.
• Experience: Experience working across multiple stakeholders and cross-functional teams; supporting senior management or a technology leadership team is advantageous.
• Experience: Experience in AI Governance or Generative AI initiatives.
• Skills & Competencies: Good IT governance, risk, compliance and coordination skills, with familiarity in ISO/IEC 27001 and audit processes.
• Skills & Competencies: Good business writing, presentation and stakeholder communication skills.
• Skills & Competencies: Good financial and budget management skills.
• Skills & Competencies: Good Microsoft Office skills (Excel, PowerPoint) and familiarity with Teams, Forms and SharePoint.
• Skills & Competencies: Good organisational and time-management skills; able to manage multiple deadlines and work independently.
• Skills & Competencies: Able to handle confidential and sensitive information appropriately.