Senior Consultant, GRC

DACTA SG PTE. LTD.; Singapore; On-site; SGD 70,000 - 130,000; Full time

Job summary

DACTA SG PTE. LTD. is seeking a Security & Compliance Specialist to conduct comprehensive risk assessments, develop mitigation controls, and ensure alignment with ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.

You will collaborate with cross-functional teams to embed security requirements in business processes, implement policies, and act as the Data Protection Officer liaison with regulators and data subjects, while delivering staff training to raise security awareness.

Qualifications

• Bachelor’s degree or equivalent work experience in Computer Science, Information Security, or related field.
• Industry certifications such as CISSP, CISA, CISM, or CRISC are preferred.

Responsibilities

• Conduct comprehensive risk assessments to identify threats and vulnerabilities.
• Develop and implement risk mitigation strategies and controls.
• Stay updated on ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
• Collaborate with cross-functional teams to integrate security requirements.
• Assist in developing and implementing security policies, procedures, and guidelines.
• Serve as DPO duties liaison and ensure regulatory compliance with data protection regulations.
• Provide guidance to internal stakeholders on security and compliance matters.
• Conduct audits and assessments to monitor compliance with policies and standards.
• Develop and deliver training programs to raise security awareness.

Skills

Security risk assessments

Regulatory compliance

Communication skills

Independent work

Problem solving

Staying up to date with cybersecurity

DPO liaison

Training & awareness

Education

Bachelor’s degree in CS/InfoSec or related field

Job description

Responsible:

• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the organization's systems, processes, and policies.
• Develop and implement risk mitigation strategies and controls to minimize the impact of identified risks.
• Stay abreast of evolving security frameworks, regulations, and standards, such as ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
• Collaborate with cross-functional teams to integrate security requirements into business processes and technology solutions.
• Assist in the development and implementation of security policies, procedures, and guidelines to ensure alignment with regulatory requirements and industry best practices.
• Serve as the primary point of contact for Data Protection Officer (DPO) duties, including overseeing data protection activities, ensuring compliance with relevant data protection regulations, and acting as a liaison between the organization and regulatory authorities or data subjects.
• Provide guidance and support to internal stakeholders on security and compliance-related matters.
• Conduct regular audits and assessments to monitor compliance with established security policies, procedures, and standards.
• Develop and deliver training programs to raise awareness of security risks and compliance requirements among employees.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or equivalent.
• Extensive experience of at least 3-5 years in performing Risk Assessment and delivering compliance standards across diverse environments, from SME to Enterprise.
• Excellent written and verbal communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Ability to work independently, manage multiple projects simultaneously, and meet tight deadlines.
• Strong problem-solving skills and attention to detail.
• A commitment to staying up to date with the evolving cybersecurity landscape.