Lead Consultant, GRC

NCS; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

A leading technology firm in Singapore is seeking an experienced auditor to manage IT process audits, mentor team members, and provide guidance on cybersecurity standards. The ideal candidate will have over 10 years of experience in information security, strong leadership skills, and relevant industry certifications. This role requires a Singapore Citizen, reflecting the commitment to local project sensitivities and compliance.

Qualifications

• 10+ years of experience in information security governance, risk management, and audit.
• Experience leading a team and knowledge of information security standards.
• Relevant certifications such as CISSP, CISM, CISA, CRISC.

Responsibilities

• Conduct audits and identify gaps in IT processes.
• Provide guidance to auditors and mentor team members.
• Conduct briefings on policies and compliance improvement.

Skills

Information security governance

Risk management

Audit leadership

Communication skills

Mentoring

Negotiation

Education

Degree in Cybersecurity, Computer Science, Engineering, or Information Systems

Job description

Job Responsibilities

• Plan and conduct Independent Reviews (IT process audits), bite‑sized audits and self‑attestations on selected Applications/Infrastructure with approval from Client to identify gaps and improvement areas
• Track and report remediation status of IT findings to closure
• Provide guidance to auditors within the team to deliver high‑quality work
• Develop team capability to provide IT and cybersecurity audit services against policies and standards
• Mentor auditors within team and ensure their professional growth and competency
• Manage multiple stakeholders within a complex client environment
• Conduct quarterly briefing sessions to project teams on frequently used policies/directives and common observations/improvement areas from audits to enhance compliance and create awareness
• Provide consultation to project teams on queries related to standards/policies/directives
• Provide advisory and QA to project teams and stakeholders on their responses, evidence, remediation plan to auditors or compliance‑related declarations during external audit exercise
• Propose and implement improvement initiatives to enhance audit processes and compliance readiness
• Develop materials and tools for delivery of consultancy services (e.g., workpapers, report templates)

Qualifications

• Degree or higher in Cybersecurity, Computer Science, Engineering, or Information Systems
• Minimum of 10 years working in areas of information security governance, risk management, and audit; experience in other areas of information security will be considered
• Experience in leading a team
• Experience in Singapore‑based Government projects will have an added advantage
• Knowledge of information security standards and frameworks such as GovTech IM8, ICT&SS, SSP, ISO 27001/2, NIST CSF, and CIS Controls
• Relevant industry certifications such as CISSP, CISM, CISA, CRISC and ISO 27001 Lead Auditor are highly desirable
• Excellent oral and written communication skills
• Highly motivated individual with a positive “can‑do” attitude, creative with excellent presentation, communication, negotiation, and interpersonal skills including strong persuasive techniques
• Due to project sensitivity, only Singapore Citizen will be considered

Company Overview

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.