Senior Information Security Manager | GRC

Randstad Singapore; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

Randstad Singapore is recruiting an Information Security Manager / GRC to drive the organization’s cybersecurity governance, risk management and compliance program from our Singapore headquarters. The role entails shaping policies, standards, KPIs and KRIs, and delivering executive-ready risk insights.

The ideal candidate will have 7+ years in Information Security or GRC, with exposure to ISO 27001 and other IT risk frameworks, and strong cross-functional collaboration skills.

Qualifications

• At least 7 years of experience in Information Security or GRC.
• Exposure to ISO 27001 and other IT risk frameworks is a plus.
• Strong governance, risk and compliance mindset.
• Ability to translate technical risk into business impacts.

Responsibilities

• Spearhead the organization-wide cybersecurity governance framework, policies, standards and baselines.
• Lead group-wide cybersecurity risk management and track risk treatment plans.
• Direct global assurance reviews and maturity assessments with remediation tracking.
• Provide governance oversight for major cybersecurity programs with KPIs and KRIs.
• Create executive dashboards and papers translating risk into business impact.
• Coordinate cross-functional units and regional leads to align security priorities.

Skills

GRC governance

Information security

Risk management

ISO 27001

Executive communication

Education

Bachelor’s degree in Information Security / CS

Job description

• High Visibility with autonomy to make decisions for GRC


• Permanent role with high job stability

About the company

Our client is the market leader in their industry. As part of their plan to invest in technology, they are now hiring a new Information Security Manage / GRC to be based here in their Headquarters here in Singapore.

About the job

Your role involves:

• Spearhead and continuously refine the organization-wide cybersecurity governance framework, policies, standards, and control baselines.


• Lead group-wide cybersecurity risk management, guiding risk assessments for key enterprise initiatives and tracking treatment plans.


• Direct global assurance reviews and maturity assessments, driving remediation tracking to systematically resolve recurring control gaps.


• Provide governance oversight for major cybersecurity programs while defining key governance metrics, KPIs, and KRIs.


• Create executive-level dashboards and decision papers to translate technical risks into clear business impacts for senior leadership.


• Coordinate cross-functional business units, technology teams, and regional leads to align security priorities and risk decisions.

Skills and experience required

As a successful applicant, you will have at least 7 years of experience in Information Security or GRC / Governance, Risk & Compliance . Exposure to IT risk frameworks such as ISO 27001 will be of added advantage,

Whats on offer

This is an excellent opportunity to join an established company with heavy investments in information security.

Desired Skills and Experience

IT governance,information security, governance, risk management and Compliance (GRC), grc, iso 27001, Technology Risk, IT Risk Management, risk management, security awareness, enterprise risk management