Senior Cyber GRC Lead – Governance, Risk & Compliance

CAREERALLY PTE. LTD.; Singapore; Vor Ort; SGD 100.000 - 167.000; Vollzeit

Benefits dieser Stelle

Attractive Bonus & Benefits

Zusammenfassung

CAREERALLY PTE. LTD. in Singapore is seeking a Cybersecurity GRC Lead to shape governance, risk and compliance programs from a central area. The role focuses on policy development, audits, and regulatory engagement to strengthen security controls across IT systems.

The ideal candidate brings a decade of IT governance and risk experience, plus MAS TRM knowledge and relevant GRC certifications. This permanent, on-site position offers a competitive package with bonuses and benefits.

Qualifikationen

• Bachelor’s degree in computer science, cybersecurity, information security, or related certifications.
• Minimum 10 years of experience in IT governance, cybersecurity risk management, or compliance.
• Strong knowledge of MAS Technology Risk Management (TRM) Guidelines and ability to engage with MAS/regulators.
• Experience managing security policies, control frameworks, and audit compliance.
• Experience with emerging tech risks including AI and quantum computing is advantageous.
• Certifications such as CISA, CISM, CRISC, CISSP or ISC2 GRC qualifications preferred.

Aufgaben

• Develop, implement, and maintain cybersecurity policies, standards, and procedures in line with business objectives, regulatory requirements, and industry best practices.
• Lead the Security Governance and Assurance team and drive continuous improvements in cybersecurity processes, efficiency, and automation.
• Conduct cybersecurity risk assessments, review security exceptions and risk acceptance requests, and recommend appropriate mitigation measures.
• Oversee cybersecurity vulnerabilities, security control gaps, and remediation efforts across IT systems, applications, and infrastructure.
• Monitor regulatory developments and ensure compliance with applicable cybersecurity regulations, MAS Notices, and industry standards.
• Oversee security assurance activities, including Vulnerability Assessment and Penetration Testing (VAPT), red-team exercises, and tabletop exercises.
• Coordinate internal and external IT security audits and ensure timely and effective remediation of audit findings.
• Develop and monitor cybersecurity metrics and Key Risk Indicators (KRIs), providing regular reports on security risks and control effectiveness to senior management and risk committees.
• Collaborate with the CISO, business units, and technology teams to strengthen cybersecurity governance and align security initiatives with business objectives.

Kenntnisse

GRC leadership

Cybersecurity governance

Regulatory engagement

Risk management

Ausbildung

Bachelor’s degree in computer science / cybersecurity / information security

Jobbeschreibung

CAREERALLY PTE. LTD. in Singapore is seeking a Cybersecurity GRC Lead to shape governance, risk and compliance programs from a central area. The role focuses on policy development, audits, and regulatory engagement to strengthen security controls across IT systems.

The ideal candidate brings a decade of IT governance and risk experience, plus MAS TRM knowledge and relevant GRC certifications. This permanent, on-site position offers a competitive package with bonuses and benefits.