IT Consultant, IT Compliance & Risk Management

Singapore Institute of Technology; Singapore; On-site; SGD 90,000 - 150,000; Part time

Job summary

Singapore Institute of Technology is seeking an IT Consultant for IT Compliance & Risk Management to lead governance, risk, and compliance efforts across the organisation. The role entails developing, implementing, and monitoring IT governance frameworks, policies, and controls aligned with regulatory requirements and industry standards.

Reporting to the Principal IT Consultant, the role supports robust IT governance, risk management, and compliance initiatives while engaging with

Qualifications

• Degree in Information Technology, Computer Science or related discipline.
• Minimum 8 years of experience in IT governance, audits and risk management.
• Experience with ISO27001 and CTM compliance; certifications are desirable.
• Strong knowledge of ISO27001:2022, Cybersecurity Trustmark and PDPA.
• Strong analytical and problem-solving skills.
• Ability to work independently and across teams.
• Excellent written and verbal communication skills.
• Positive attitude and team player.

Responsibilities

• Drive IT GRC awareness and engagement across the organisation.
• Manage and coordinate IT audits with internal stakeholders.
• Ensure IT policies, procedures and controls are up to date and reduce risk.
• Develop, maintain and report the IT Risk Register.
• Perform internal control testing to ensure policy compliance.
• Coordinate quarterly IT Disaster Recovery (ITDR) exercises.
• Identify gaps in IT processes and drive remediation.
• Review minutes of quarterly division and IT committee meetings.

Skills

IT Governance

IT Audits

Risk Management

ISO27001

PDPA

Cybersecurity

Stakeholder Engagement

Analytical Thinking

Education

Bachelor's degree in IT/CS

Tools

Audit Tools

Security Frameworks

Job description

Job Description

IT Consultant, IT Compliance & Risk Management

Posting Start Date: 30/07/2026

Schemes of Service: Corporate

Division: Communications & Information Technology

Employment Type: Fixed Term

Reporting to the Principal IT Consultant, this role supports the Communications & Information Technology Division by ensuring robust IT Governance, Risk & Compliance (GRC) which includes development, implementation, and monitoring of IT governance frameworks, policies, processes to ensure the organisation’s IT practices align with regulatory requirements, industry standards, and strategic business goals.

Key Responsbilities

• Drive organisational awareness and engagement to support IT GRC objectives
• Manage and coordinate IT audits by working with internal stakeholders to gather required information and review submissions to auditors
• Ensure IT policies, procedures and controls are up to date, properly documented with relevant stakeholders, and aligned with current processes to reduce risk
• Develop, maintain, review and report on the IT Risk Register
• Perform internal control testing or sampling checks to ensure compliance with IT policies and procedures
• Schedule and participate in periodic risk self-assessments, and track remediation action plans to closure
• Support initiatives to assess the adequacy and effectiveness of IT controls and policies and oversee remediation activities to address compliance gaps
• Coordinate with relevant stakeholders on quarterly IT Disaster Recovery (ITDR) exercises and follow-up actions
• Consolidate IT incidents and conduct root cause analysis
• Identify gaps in IT processes and work with stakeholders to implement remediation measures (e.g. work process gaps in Low Code/No Code platforms)
• Assist in reviewing meeting minutes of quarterly division and IT committee meetings

Job Requirements

• Degree in Information Technology, Computer Science or a related discipline
• At least 8 years of relevant experience in IT governance, audits and risk management
• Proven experience with ISO27001 and CTM compliance efforts; certification experience is highly desirable
• Strong knowledge and experience with standards and frameworks such as ISO27001:2022, Cybersecurity Trustmark and Personal Data Protection Act (PDPA)
• Strong analytical and problem-solving skills
• Ability to work independently as well as collaboratively across teams
• Strong written and verbal communication skills, with the ability to engage stakeholders at all levels
• Positive attitude, proactive mindset and an excellent team player