Senior Consultant

DACTA SG PTE. LTD.; Singapore; On-site; SGD 85,000 - 125,000; Full time

Job summary

DACTA SG PTE. LTD. is seeking a seasoned Risk and Compliance Specialist to lead risk assessments, design mitigations, and ensure alignment with global standards. The role collaborates across functions to embed security requirements into processes and technology solutions.

You will drive regulatory compliance programs, perform audits, and deliver training to raise awareness across the organization, staying updated with ISO 27001:2022, GDPR, PDPA, and NIST frameworks.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Certifications such as CISSP, CISA, CISM, CRISC or equivalent are required.
• 3–5 years or more in risk assessment and compliance across diverse environments.

Responsibilities

• Conduct comprehensive risk assessments to identify threats and vulnerabilities.
• Develop and implement risk mitigation strategies and controls.
• Stay updated with ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
• Collaborate with cross-functional teams to embed security requirements.
• Assist in security policies, procedures, and guidelines.
• Act as DPO duties liaison and ensure regulatory compliance.
• Provide guidance to internal stakeholders on security and compliance.
• Perform regular audits and assessments to monitor adherence to policies.
• Develop and deliver security and compliance training.

Skills

Risk assessment

Compliance awareness

Communication

Independence

Project management

Education

Bachelor’s degree in Computer Science, Information Security, or related field

CISSP, CISA, CISM, CRISC or equivalent certifications

Job description

Responsible:

• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the organization's systems, processes, and policies.
• Develop and implement risk mitigation strategies and controls to minimize the impact of identified risks.
• Stay abreast of evolving security frameworks, regulations, and standards, such as ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
• Collaborate with cross-functional teams to integrate security requirements into business processes and technology solutions.
• Assist in the development and implementation of security policies, procedures, and guidelines to ensure alignment with regulatory requirements and industry best practices.
• Serve as the primary point of contact for Data Protection Officer (DPO) duties, including overseeing data protection activities, ensuring compliance with relevant data protection regulations, and acting as a liaison between the organization and regulatory authorities or data subjects.
• Provide guidance and support to internal stakeholders on security and compliance-related matters.
• Conduct regular audits and assessments to monitor compliance with established security policies, procedures, and standards.
• Develop and deliver training programs to raise awareness of security risks and compliance requirements among employees.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or equivalent.
• Extensive experience of at least 3-5 years in performing Risk Assessment and delivering compliance standards across diverse environments, from SME to Enterprise.
• Excellent written and verbal communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Ability to work independently, manage multiple projects simultaneously, and meet tight deadlines.
• Strong problem-solving skills and attention to detail.
• A commitment to staying up to date with the evolving cybersecurity landscape.