IT Governance, Risk & Compliance (GRC), Senior Specialist - 1 Year Contract

MORGAN MCKINLEY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Morgan McKinley Pte. Ltd. is seeking a Senior GRC Specialist deployed to a leading government technology agency in Singapore.

You will ensure IM8 policy compliance, manage IT risk and controls, and coordinate audit readiness and remediation across the organisation. Responsibilities include driving IT governance and risk programs, coordinating risk assessments, supporting internal and external audits, conducting control testing, and producing risk dashboards with actionable insights for senior

Qualifications

• 5+ years in Cybersecurity GRC, IT risk management, information security or IT audit.
• Hands-on IM8 policy experience and interpretation of policy requirements.
• Experience with IT controls, control assessments and remediation activities.
• Audit prep and coordination with internal and external audits.
• Knowledge of ISO 27001, COBIT, PCI DSS, OWASP.
• Excellent communication and stakeholder engagement skills.
• Proficiency with Microsoft Office tools.

Responsibilities

• Serve as the primary IT GRC contact, driving risk and compliance across the organisation.
• Coordinate risk assessments, track remediation progress and ensure governance alignment.
• Support audits and reviews, validate findings and monitor remediation efforts.
• Conduct periodic control assessments to verify policy adherence and security standards.
• Perform cybersecurity control testing and recommend improvements.
• Identify opportunities to strengthen internal controls and governance processes.
• Develop risk dashboards and management reports for senior leadership.
• Provide risk insights to support decision-making and risk mitigation.
• Prepare and present GRC updates to senior management and stakeholders.
• Coordinate governance forums and risk committees.

Skills

IT GRC

Cybersecurity Governance

Risk Management

Audit Coordination

Regulatory Compliance

IM8 policies

Stakeholder Communication

GRC Frameworks

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

SharePoint

Excel

PowerPoint

Word

MS Office

Job description

Job Summary

You will be deployed to our client who is a leading government technology agency driving digital transformation and innovation in the healthcare sector. Seeking a Senior GRC Specialist responsible for ensuring compliance with IM8 policies, managing IT risks and controls, and coordinating audit readiness and remediation across the organisation.

Responsibilities

• Serve as the key point of contact for IT governance, risk and compliance (GRC) matters, engaging with internal stakeholders to drive effective risk and compliance management.
• Coordinate risk assessments, review risk treatment plans, track remediation progress and ensure compliance with established governance frameworks and requirements.
• Support internal and external IT audits and reviews, including coordinating assessments, validating findings and monitoring remediation efforts.
• Conduct periodic compliance and control assessments across IT applications to evaluate adherence to relevant policies, regulatory requirements and security standards.
• Perform cybersecurity and IT control testing to assess control design and operating effectiveness, identifying gaps and recommending improvements.
• Identify opportunities to strengthen and standardise internal controls, governance processes and compliance practices.
• Develop and maintain management reports, risk metrics and dashboards to provide visibility into the organisation's risk and compliance posture.
• Provide actionable risk insights and recommendations to management to support informed decision-making and risk mitigation.
• Prepare and present GRC updates and reports to senior management and relevant stakeholders.
• Coordinate governance forums, risk committees and periodic stakeholder meetings.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• At least 5 years of relevant experience in Cybersecurity Governance, Risk & Compliance (GRC), IT Risk Management, Information Security or IT Audit.
• Strong expertise in Governance, Risk & Compliance (GRC), with mandatory hands‑on experience in Singapore Government Instruction Manual 8 (IM8) policies and requirements.
• Proven experience in ensuring organisational compliance with IM8 policies, including interpreting policy requirements, conducting compliance assessments and implementing necessary controls.
• Strong expertise in IT controls and IT risk management, including control assessments, control effectiveness testing, risk identification, evaluation and mitigation.
• Proven experience in audit preparation and coordination, including supporting internal and external audits, addressing audit findings and driving remediation activities.
• Good knowledge of cybersecurity governance, information security standards and frameworks such as ISO 27001, COBIT, PCI DSS and OWASP.
• Experience in developing risk assessments, control frameworks, compliance reports and risk remediation plans.
• Strong analytical, critical thinking and problem‑solving skills, with the ability to identify control gaps and recommend improvements.Excellent verbal and written communication skills, with the ability to engage stakeholders and present complex risk and compliance matters clearly.
• Proficient in Microsoft Office applications, particularly Excel, PowerPoint, Word and SharePoint.
• Experience in the healthcare or public sector would be advantageous.
• Professional certifications such as CISA, CISSP, CISM, CRISC or CGEIT would be an added advantage