Senior GRC Consultant: Risk, Compliance & Data Protection

DACTA SG PTE. LTD.; Singapore; On-site; SGD 70,000 - 130,000; Full time

Job summary

DACTA SG PTE. LTD. is seeking a Security & Compliance Specialist to conduct comprehensive risk assessments, develop mitigation controls, and ensure alignment with ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.

You will collaborate with cross-functional teams to embed security requirements in business processes, implement policies, and act as the Data Protection Officer liaison with regulators and data subjects, while delivering staff training to raise security awareness.

Qualifications

• Bachelor’s degree or equivalent work experience in Computer Science, Information Security, or related field.
• Industry certifications such as CISSP, CISA, CISM, or CRISC are preferred.

Responsibilities

• Conduct comprehensive risk assessments to identify threats and vulnerabilities.
• Develop and implement risk mitigation strategies and controls.
• Stay updated on ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
• Collaborate with cross-functional teams to integrate security requirements.
• Assist in developing and implementing security policies, procedures, and guidelines.
• Serve as DPO duties liaison and ensure regulatory compliance with data protection regulations.
• Provide guidance to internal stakeholders on security and compliance matters.
• Conduct audits and assessments to monitor compliance with policies and standards.
• Develop and deliver training programs to raise security awareness.

Skills

Security risk assessments

Regulatory compliance

Communication skills

Independent work

Problem solving

Staying up to date with cybersecurity

DPO liaison

Training & awareness

Education

Bachelor’s degree in CS/InfoSec or related field

Job description

DACTA SG PTE. LTD. is seeking a Security & Compliance Specialist to conduct comprehensive risk assessments, develop mitigation controls, and ensure alignment with ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.

You will collaborate with cross-functional teams to embed security requirements in business processes, implement policies, and act as the Data Protection Officer liaison with regulators and data subjects, while delivering staff training to raise security awareness.