Senior GRC & AppSec Engineer

Monetary Authority of Singapore; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

The Monetary Authority of Singapore is seeking a Governance Risk and Compliance Specialist & Application Security Engineer to strengthen ICT risk governance and cybersecurity across the organization.

You will review ICT policies, support risk management, and integrate security into the SDLC, working with development teams to identify and remediate vulnerabilities while adhering to MAS standards.

Qualifications

• 5+ years in ICT cybersecurity, data security, governance, risk & compliance management or security engineering/architecture
• Certified in IT governance, IT audit or cyber/data security preferred (e.g. CISSP, CISM, CISA)
• Ability to work with cross-functional teams to operationalise security policies
• Knowledge of cybersecurity standards and regulatory practices (GovTech, CSA, MAS)
• Experience with vulnerability assessment, penetration testing and secure coding practices

Responsibilities

• Develop and promote technology risk governance and management across MAS
• Provide SME advice on cybersecurity requirements and policy compliance
• Review ICT policies and perform regular compliance checks
• Lead risk forums, track remediation plans and coordinate audits
• Implement secure coding practices and integrate security into SDLC
• Collaborate with development teams to remediate vulnerabilities and automate security testing
• Produce management reports with data analysis and strategic recommendations

Skills

Analytical skills

Communication skills

Team player

Attention to detail

Problem solving

Education

CISSP/CISM/CISA certifications

Tools

JIRA

Job description

The Monetary Authority of Singapore is seeking a Governance Risk and Compliance Specialist & Application Security Engineer to strengthen ICT risk governance and cybersecurity across the organization.

You will review ICT policies, support risk management, and integrate security into the SDLC, working with development teams to identify and remediate vulnerabilities while adhering to MAS standards.