Senior Assistant IT Consultant (IT Compliance & Risk Management)

Singapore Institute Of Technology; Singapore; On-site; SGD 70,000 - 110,000; Part time

Job summary

Singapore Institute of Technology is seeking a Senior Assistant IT Consultant (IT Compliance & Risk Management) to support the IT Governance, Risk & Compliance program. The role reports to the Principal IT Consultant and focuses on developing and monitoring governance frameworks, policies and controls aligned with regulations and strategic goals.

The successful candidate will drive awareness, coordinate audits, maintain risk registers, perform control testing, and lead/participate in risk

Qualifications

• Degree in Information Technology, Computer Science or a related discipline.
• 3+ years of IT governance, audits and risk management experience.
• Proven experience with ISO27001 and CTM compliance; certification experience is highly desirable.
• Good knowledge of ISO27001:2022, Cybersecurity Trustmark and PDPA.

Responsibilities

• Drive organisational awareness and engagement to support IT GRC objectives.
• Manage and coordinate IT audits by working with internal stakeholders and auditors.
• Ensure IT policies, procedures and controls are up to date and documented with stakeholders to reduce risk.
• Develop, maintain, review and report on the IT Risk Register.
• Perform internal control testing or sampling to ensure compliance with IT policies.
• Schedule and participate in periodic risk self-assessments and track remediation actions to closure.
• Support initiatives to assess IT controls and oversee remediation of compliance gaps.
• Coordinate with stakeholders on quarterly IT Disaster Recovery (ITDR) exercises and follow-up actions.
• Consolidate IT incidents and conduct root cause analysis.
• Identify gaps in IT processes and work with stakeholders to remediate.
• Assist in reviewing meeting minutes of quarterly division and IT committee meetings.

Skills

IT governance

Risk management

Audits

Compliance

Analytical skills

Communication skills

Stakeholder engagement

Education

Degree in IT or CS

Job description

Senior Assistant IT Consultant (IT Compliance & Risk Management)

Posting Start Date: 06/11/2026 Schemes of Service: Corporate Division: Communications & Information Technology Employment Type: Fixed Term

Reporting to the Principal IT Consultant, this role supports the Communications & Information Technology Division by ensuring robust IT Governance, Risk & Compliance (GRC) which includes development, implementation, and monitoring of IT governance frameworks, policies, processes to ensure the organisation’s IT practices align with regulatory requirements, industry standards, and strategic business goals.

Key Responsibilities

• Drive organisational awareness and engagement to support IT GRC objectives
• Manage and coordinate IT audits by working with internal stakeholders to gather required information and review submissions to auditors
• Ensure IT policies, procedures and controls are up to date, properly documented with relevant stakeholders, and aligned with current processes to reduce risk
• Develop, maintain, review and report on the IT Risk Register
• Perform internal control testing or sampling checks to ensure compliance with IT policies and procedures
• Schedule and participate in periodic risk self-assessments, and track remediation action plans to closure
• Support initiatives to assess the adequacy and effectiveness of IT controls and policies and oversee remediation activities to address compliance gaps
• Coordinate with relevant stakeholders on quarterly IT Disaster Recovery (ITDR) exercises and follow-up actions
• Consolidate IT incidents and conduct root cause analysis
• Identify gaps in IT processes and work with stakeholders to implement remediation measures (e.g. work process gaps in Low Code/No Code platforms)
• Assist in reviewing meeting minutes of quarterly division and IT committee meetings

Job Requirements

• Degree in Information Technology, Computer Science or a related discipline
• At least 3 years of relevant experience in IT governance, audits and risk management
• Proven experience with ISO27001 and CTM compliance efforts; certification experience is highly desirable
• Good knowledge and experience with standards and frameworks such as ISO27001:2022, Cybersecurity Trustmark and Personal Data Protection Act (PDPA)
• Strong analytical and problem-solving skills
• Ability to work independently as well as collaboratively across teams
• Good written and verbal communication skills, with the ability to engage stakeholders at all levels
• Positive attitude, proactive mindset and an excellent team player

Copyright © 2025 Singapore Institute of Technology. All Rights Reserved.