Senior Cybersecurity GRC & Zero Trust Governance Lead

SCIENTE; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

SCIENTE is seeking an experienced Cybersecurity Governance Specialist to lead enterprise cybersecurity risk governance, threat risk assessments, and security architecture initiatives across IT, Cloud, and OT. The role focuses on driving Zero Trust adoption, audit readiness, and supply chain risk management to strengthen organizational cyber resilience.

The candidate will lead risk discussions with senior leadership, establish risk registers, and guide security controls mapping to MITRE ATT&CK.

Qualifications

• At least 10 years in Cybersecurity GRC or security architecture.
• Experience in threat risk assessments (TRA/TVRA) and threat modeling.
• Knowledge of Zero Trust, security-by-design principles, and cloud security controls.

Responsibilities

• Establish and maintain enterprise cybersecurity risk registers.
• Lead risk discussions with senior leadership and key stakeholders.
• Develop and govern TRA standards and frameworks.
• Define and drive Zero Trust and security-architecture governance initiatives.
• Provide security advisory during system design and implementation phases.
• Establish frameworks for third-party and software supply chain risk management.
• Drive audit readiness and oversee remediation of audit findings.
• Monitor emerging threats and assess effectiveness of security controls.

Skills

10+ years Cybersecurity GRC

Enterprise risk governance

Threat Risk Assessments (TRA/TVRA)

Zero Trust Architecture

Cloud security

Third-party risk management

MITRE ATT&CK mapping

Job description

SCIENTE is seeking an experienced Cybersecurity Governance Specialist to lead enterprise cybersecurity risk governance, threat risk assessments, and security architecture initiatives across IT, Cloud, and OT. The role focuses on driving Zero Trust adoption, audit readiness, and supply chain risk management to strengthen organizational cyber resilience.

The candidate will lead risk discussions with senior leadership, establish risk registers, and guide security controls mapping to MITRE ATT&CK.