Lead Cybersecurity GRC Consultant

ACCESS PEOPLE (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ACCESS PEOPLE (SINGAPORE) PTE. LTD. in Outram, SG, is seeking a Lead Consultant to join its Cyber Security Governance, Risk and Compliance team.

The role covers policy and control framework development, regulatory mapping, risk and maturity assessments, and remediation planning for clients across regulated industries and the public sector. Lead the development and implementation of policies and controls, map requirements to practical governance processes, and manage end-to-end engagement

Qualifications

• Experience in cyber security governance, risk and compliance in consulting, advisory or in-house second line.
• Working knowledge of ISO 27001 and NIST CSF with exposure to MAS TRM and Cyber Hygiene.
• Ability to translate regulatory requirements into testable controls and remediation priorities.
• Hands-on experience with at least one GRC platform (Archer, ServiceNow GRC, OneTrust).
• Certifications such as CISSP, CISM, CRISC, CISA are advantageous.

Responsibilities

• Develop, review and implement cybersecurity policies, standards, procedures and control frameworks for client organisations.
• Translate regulatory and compliance obligations into governance processes, control statements and operating procedures that clients can adopt and evidence.
• Own engagement deliverables end to end, including current state assessments, control gap analyses, risk registers, remediation roadmaps and executive reporting.
• Map control sets across ISO 27001, NIST CSF and regional regulatory requirements such as MAS TRM and Cyber Hygiene, identifying overlaps, gaps and remediation priorities.
• Conduct cyber risk assessments, maturity assessments and compliance reviews, including IM8, CCOP and ISO aligned reviews.
• Work within GRC platforms such as Archer, ServiceNow GRC or OneTrust to operationalise control libraries, assessment workflows and reporting.
• Facilitate workshops, stakeholder interviews and executive presentations, articulating risk exposure and recommendations to both technical and business audiences.
• Manage multiple stakeholder groups across concurrent engagements and support quality review of junior colleagues' work.

Skills

GRC

Policy development

Risk assessments

Regulatory mapping

Tools

Archer

ServiceNow GRC

OneTrust

Job description

ACCESS PEOPLE (SINGAPORE) PTE. LTD. in Outram, SG, is seeking a Lead Consultant to join its Cyber Security Governance, Risk and Compliance team.

The role covers policy and control framework development, regulatory mapping, risk and maturity assessments, and remediation planning for clients across regulated industries and the public sector. Lead the development and implementation of policies and controls, map requirements to practical governance processes, and manage end-to-end engagement