Senior GRC & Cybersecurity Consultant

GTS Consulting; Singapore; In loco; SGD 90.000 - 150.000; Tempo pieno

Descrizione del lavoro

GTS Consulting seeks an experienced Cybersecurity Consultant specializing in Governance, Risk and Compliance (GRC) to support ISO/IEC 27001, CSA marks, DPTM/SS 714, TRA, and regulatory engagements. You will collaborate closely with client management and IT teams to strengthen governance, prepare for audits, and meet regulatory requirements.

You will work with Stone Cybersecurity’s testing and SOC teams to translate findings into governance actions and risk treatment plans, delivering practical,

Competenze

• GRC and regulatory compliance experience with cybersecurity programs.
• Experience delivering readiness, implementation, and certification engagements for ISO/IEC 27001 and CSA marks.
• Strong ability to conduct regulatory gap assessments against MAS TRM, PDPA, NIST CSF, GDPR.

Mansioni

• Support and deliver readiness, implementation, and certification engagements for ISO/IEC 27001 and CSA marks.
• Conduct compliance gap assessments and cybersecurity maturity evaluations against applicable standards and regulations.
• Develop audit‑ready ISMS documentation, including policies, risk registers, and control mappings.
• Assist clients during internal and external audits and regulatory assessments.
• Prepare and present assessment findings and remediation plans to client stakeholders.

Conoscenze

GRC

Regulatory Compliance

Audit Readiness

Stakeholder Engagement

Risk Management

ISO 27001

Formazione

CISSP/CISA/CISM/CRISC/CCSP or ISO 27001/27701 LA/LI

Descrizione del lavoro

GTS Consulting seeks an experienced Cybersecurity Consultant specializing in Governance, Risk and Compliance (GRC) to support ISO/IEC 27001, CSA marks, DPTM/SS 714, TRA, and regulatory engagements. You will collaborate closely with client management and IT teams to strengthen governance, prepare for audits, and meet regulatory requirements.

You will work with Stone Cybersecurity’s testing and SOC teams to translate findings into governance actions and risk treatment plans, delivering practical,