Senior Consultant - Governance, Risk and Compliance Specialist

WSH Experts Pte Ltd; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A leading cybersecurity firm based in Singapore seeks a Governance, Risk and Compliance Specialist. In this role, you will advise stakeholders on cybersecurity compliance and develop policies and processes. The ideal candidate should have experience in IT governance, audits, and related fields, particularly within the Singapore Public Sector. Relevant certifications like CISSP, CISM, or CISA are necessary. This position offers significant responsibility in ensuring compliance and managing cyber risks.

Qualifications

• Experience in IT Governance, IT Audit, Cyber security, or a related field required.
• Experience with Singapore Public Sector and familiarity with Instruction Manual 8 and CSA Cybersecurity Code of Practice.
• Ability to collaborate with cross-functional teams.

Responsibilities

• Develop and maintain internal cybersecurity policies and processes.
• Advise internal stakeholders on compliance requirements.
• Support IT/cybersecurity audits and track cyber risks.

Skills

IT Governance

IT Audit

Cyber security

Cross-functional teamwork

Regulatory compliance

Education

Relevant certifications (CISSP, CISM, CISA, CGEIT)

Job description

Job Description

Position: Governance, Risk and Compliance Specialist

Duration: 3 Years

Domain: Financial Services

Job Summary

As a Governance, Risk and Compliance Specialist in the client’s Cybersecurity (CySD) Division’s Security Governance & Compliance (SGC) team, you will be a subject matter expert advising internal stakeholders on cybersecurity compliance requirements. You will be working closely with infrastructure, application, line 2 and auditors.

Your Scope of Work Includes

• Develop and maintain internal cybersecurity policies and processes;
• Ascertain security compliance with regulatory, and internal policies and processes;
• Support IT / cyber security audits; and
• Tracking and reporting cyber risks.

Job Responsibilities

• Develop the culture of cybersecurity governance, compliance and risk management across the Organisation, and ensure proper accountability in the management, tracking and reporting of cyber risks.
• Provide subject matter advice to internal stakeholders on cyber security requirements that the Authority is required to comply with, including client’s internal policies and standards, as well as policies and standards from GovTech and Cyber Security Agency of Singapore.
• Develop, review, establish and communicate ICT policies and processes controls, and conduct compliance checks.
• Support the CIO and CISO, and work with internal stakeholders to:
• Track and monitor cyber security initiatives to meet compliance requirements.
• Participate in consultation and conduct gap analysis against new requirements.
• Assess and seek waiver approvals for deviations and dispensations.
• Coordinate and facilitate IT / cyber security audits.
• Track remediation plans to address audit findings.

Job Requirements

• Working experience in IT Governance, IT Audit, Cyber security or related field.
• Working experience with Singapore Public Sector and knowledge of Instruction Manual 8 and CSA Cybersecurity Code of Practice.
• Relevant certifications in IT governance, IT audit, cyber or data security (e.g. CISSP, CISM, CISA, CGEIT, etc.).
• Ability to work with cross-functional, multi-disciplined teams to institute and monitor security policies and procedures.
• Knowledge of Instruction Manual 8 and CSA Cybersecurity Code of Practice preferred.

If the requirement matches with your profile, kindly share your updated CV/resume to Aparna at [e-mail]