Junior IT GRC Associate — Global Compliance & Security

AGES SYSTEMS GELDERFARENIT PRIVATE LIMITED; Singapore; On-site; SGD 45,000 - 65,000; Full time

Job summary

AGES SYSTEMS GELDERFARENIT PRIVATE LIMITED is seeking a GRC Junior Associate to support attestation-based audits against the PCI SSC framework across a global client portfolio. This role offers an entry point into the payment security industry with exposure to security frameworks required for handling cardholder data.

You will gain experience in audits, compliance readiness, and reporting while traveling weekly for audits and building governance and training programs.

Qualifications

• Bachelor’s degree or diploma in a relevant field.
• Strong analytical skills to interpret data, identify patterns and draw evidence-based conclusions.
• Strong written and verbal communication skills to document and present audit findings effectively.

Responsibilities

• Support internal and external pre-audit assessments and attestation-based / certification audits across various PCI programs involving payment systems, card vendors environment, and IT infrastructure.
• Support and deliver CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation engagements.
• Support compliance and identify control gaps and risks against relevant frameworks and regulations, including PCI CPP, PCI DSS, SWIFT and VAPT.
• Prepare detailed audit reports documenting findings, evidence, and recommendations for remediation actions.
• Follow up with stakeholders to verify implementation of corrective measures and completion of remediation.
• Develop governance frameworks, cybersecurity policies, security policies and security training programs.

Skills

Analytical skills

Written & verbal communication

Education

Bachelor’s degree or diploma in a relevant field

Job description

AGES SYSTEMS GELDERFARENIT PRIVATE LIMITED is seeking a GRC Junior Associate to support attestation-based audits against the PCI SSC framework across a global client portfolio. This role offers an entry point into the payment security industry with exposure to security frameworks required for handling cardholder data.

You will gain experience in audits, compliance readiness, and reporting while traveling weekly for audits and building governance and training programs.