Senior Cybersecurity GRC & Zero Trust Lead

SCIENTE; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

SCIENTE is seeking an experienced Cybersecurity Governance Specialist to lead governance across IT, Cloud, and OT. Drive Zero Trust adoption, audit readiness, and supplier risk management while engaging stakeholders to strengthen cyber resilience.

You will establish risk registers, lead risk dialogues with executives, and help design risk assessment standards. The role requires deep expertise in risk governance and security architecture with a hands-on TRA/TVRA background.

Qualifications

• Must have 10+ years in Cybersecurity GRC, Information Security Risk Management, or Security Architecture.
• Strong expertise in enterprise risk governance and security risk management.
• Hands-on experience in Threat Risk Assessments (TRA/TVRA) and threat modeling.
• Deep understanding of Zero Trust Architecture and security-by-design principles.
• Strong knowledge of Cloud security and security control frameworks.
• Experience in third-party, vendor, and software supply chain risk management.
• Ability to map security controls to MITRE ATT&CK and evolving threat TTPs.

Responsibilities

• Establish and maintain enterprise cybersecurity risk registers.
• Lead risk discussions with senior leadership and key stakeholders.
• Develop and govern TRA standards and frameworks.
• Define and drive Zero Trust and security architecture governance initiatives.
• Provide security advisory during system design and implementation phases.
• Establish frameworks for third-party and software supply chain risk management.
• Drive audit readiness and oversee remediation of audit findings.
• Monitor emerging threats and assess effectiveness of controls.

Skills

GRC 10+ yrs

Risk governance

TRA/TVRA

Threat modeling

Zero Trust

Cloud security

Vendor risk management

MITRE ATT&CK mapping

Education

Cybersecurity certifications (CISSP/CISM/CRISC/OSCP/OSWE)

Job description

SCIENTE is seeking an experienced Cybersecurity Governance Specialist to lead governance across IT, Cloud, and OT. Drive Zero Trust adoption, audit readiness, and supplier risk management while engaging stakeholders to strengthen cyber resilience.

You will establish risk registers, lead risk dialogues with executives, and help design risk assessment standards. The role requires deep expertise in risk governance and security architecture with a hands-on TRA/TVRA background.