IT Governance, Risk & Compliance (Cloud)

REVUP PROSERVICES PTE. LTD.; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

REVUP PROSERVICES PTE. LTD. is seeking an IT Governance, Risk and Compliance professional to develop and maintain policies, controls and risk assessments. You will coordinate audits and ensure compliance with ISO 27001, SOC 2, PDPA and GDPR.

The role requires 3+ years in IT compliance or IT risk management, strong communication skills, and the ability to work independently in a fast-paced environment. A professional certification is a plus.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity or related discipline.
• Minimum 3 years in IT compliance, IT risk management, information security or IT audit.
• Good understanding of IT risk assessments, control design and control testing.
• Familiarity with ISO 27001, SOC 2, PDPA and GDPR.
• Basic understanding of cloud computing and IT infrastructure, including IAM and network security.
• Experience supporting audits, security certifications or compliance assessments.
• Good communication, documentation and stakeholder management skills.
• Able to work independently and manage multiple priorities.
• Relevant certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Auditor will be an advantage.

Responsibilities

• Develop and maintain IT governance, risk and compliance policies, processes and controls.
• Ensure compliance with security frameworks and regulations, including ISO 27001, SOC 2, PDPA and GDPR.
• Identify and assess IT and cybersecurity risks, and coordinate risk mitigation activities.
• Monitor IT controls covering cloud infrastructure, access management, data protection and cybersecurity.
• Coordinate internal and external audits, security assessments and compliance reviews.
• Conduct regular control testing, review audit findings and follow up on corrective actions.
• Maintain risk registers, compliance documentation and audit records.
• Work closely with technology, security and business teams to improve IT governance and compliance practices.

Skills

IT compliance

IT risk mgmt

Information security

IT audit

ISO 27001

Education

Bachelor's degree in IT/CS/Cybersecurity

Job description

Job Description

Develop and maintain IT governance, risk and compliance policies, processes and controls.

Ensure compliance with security frameworks and regulations, including ISO 27001, SOC 2, PDPA and GDPR.

Identify and assess IT and cybersecurity risks, and coordinate risk mitigation activities.

Monitor IT controls covering cloud infrastructure, access management, data protection and cybersecurity.

Coordinate internal and external audits, security assessments and compliance reviews.

Conduct regular control testing, review audit findings and follow up on corrective actions.

Maintain risk registers, compliance documentation and audit records.

Work closely with technology, security and business teams to improve IT governance and compliance practices.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity or a related discipline.
• Minimum 3 years of relevant experience in IT compliance, IT risk management, information security or IT audit.
• Good understanding of IT risk assessments, control design and control testing.
• Familiarity with ISO 27001, SOC 2, PDPA and GDPR.
• Basic understanding of cloud computing and IT infrastructure, including IAM and network security.
• Experience supporting audits, security certifications or compliance assessments.
• Good communication, documentation and stakeholder management skills.
• Able to work independently and manage multiple priorities.
• Relevant certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Auditor will be an advantage.