IT GRC Specialist – Compliance, Risk & Audit

Singapore Institute of Technology; Singapore; On-site; SGD 90,000 - 150,000; Part time

Job summary

Singapore Institute of Technology is seeking an IT Consultant for IT Compliance & Risk Management to lead governance, risk, and compliance efforts across the organisation. The role entails developing, implementing, and monitoring IT governance frameworks, policies, and controls aligned with regulatory requirements and industry standards.

Reporting to the Principal IT Consultant, the role supports robust IT governance, risk management, and compliance initiatives while engaging with

Qualifications

• Degree in Information Technology, Computer Science or related discipline.
• Minimum 8 years of experience in IT governance, audits and risk management.
• Experience with ISO27001 and CTM compliance; certifications are desirable.
• Strong knowledge of ISO27001:2022, Cybersecurity Trustmark and PDPA.
• Strong analytical and problem-solving skills.
• Ability to work independently and across teams.
• Excellent written and verbal communication skills.
• Positive attitude and team player.

Responsibilities

• Drive IT GRC awareness and engagement across the organisation.
• Manage and coordinate IT audits with internal stakeholders.
• Ensure IT policies, procedures and controls are up to date and reduce risk.
• Develop, maintain and report the IT Risk Register.
• Perform internal control testing to ensure policy compliance.
• Coordinate quarterly IT Disaster Recovery (ITDR) exercises.
• Identify gaps in IT processes and drive remediation.
• Review minutes of quarterly division and IT committee meetings.

Skills

IT Governance

IT Audits

Risk Management

ISO27001

PDPA

Cybersecurity

Stakeholder Engagement

Analytical Thinking

Education

Bachelor's degree in IT/CS

Tools

Audit Tools

Security Frameworks

Job description

Singapore Institute of Technology is seeking an IT Consultant for IT Compliance & Risk Management to lead governance, risk, and compliance efforts across the organisation. The role entails developing, implementing, and monitoring IT governance frameworks, policies, and controls aligned with regulatory requirements and industry standards.

Reporting to the Principal IT Consultant, the role supports robust IT governance, risk management, and compliance initiatives while engaging with