Senior GRC & Application Security Engineer

Monetary Authority of Singapore (MAS); Singapore; On-site; SGD 120,000 - 170,000; Full time

Job summary

Monetary Authority of Singapore (MAS) is seeking a Governance Risk and Compliance Specialist & Application Security Engineer. The role focuses on establishing technology risk governance, cyber security requirements, and secure SDLC practices across MAS.

The candidate will work with cross-functional teams to ensure ICT policies are current and compliant, while leading remediation and assurance activities. The position combines governance oversight with hands-on security engineering, requiring

Qualifications

• At least 5 years in ICT cybersecurity, data security, audit management, governance, risk and compliance management
• Certifications in IT governance, IT audit, cyber or data security preferred (e.g. CISSP, CISM, CISA)
• Ability to work with cross-functional teams to operationalise security policies and procedures

Responsibilities

• Develop and promote technology risk governance culture across the organisation
• Provide SME on cybersecurity requirements and compliance with MAS policies and GovTech/CSA standards
• Review ICT policies and process controls; conduct regular compliance checks
• Track technology projects to meet compliance; monitor KRIs and CSA
• Conduct risk forums; coordinate IT and cybersecurity audits and remediation actions
• Integrate security practices into SDLC and DevOps pipelines
• Remediate application security vulnerabilities and prevent incidents
• Stay updated on threats and emerging technologies; explore AI tools use cases

Skills

Cybersecurity

Risk assessment

Policy review

Incident response

Security auditing

DevOps security

Data security

JIRA

Education

Certifications: CISSP / CISM / CISA

Tools

JIRA

Job description

Monetary Authority of Singapore (MAS) is seeking a Governance Risk and Compliance Specialist & Application Security Engineer. The role focuses on establishing technology risk governance, cyber security requirements, and secure SDLC practices across MAS.

The candidate will work with cross-functional teams to ensure ICT policies are current and compliant, while leading remediation and assurance activities. The position combines governance oversight with hands-on security engineering, requiring