Senior/Lead Consultant - IT Governance, Risk & Compliance

itsec services asia pte. ltd.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

ITSEC Asia is an international information security firm delivering a broad range of services in Singapore. We are seeking a Senior/Lead consultant responsible for executing IT GRC consultancy and assessments on client projects, with on-site engagement to drive successful outcomes.

Responsibilities include conducting Threat Risk Assessments, reviewing controls and architectures for policy alignment, providing improvement recommendations, facilitating meetings, and delivering client reports to

Qualifications

• Ability to perform IT GRC consultancy and assessment tasks for client projects.
• Experience with threat risk assessments and security controls reviews.
• Strong report writing and presentation skills.

Responsibilities

• Provide & develop comprehensive consultation/assessment/evaluation/audit/reviewing effort on clients projects or routine exercises.
• Conduct Threat Risk Assessments and review adequacy of controls/system architecture against policies.
• Provide recommendations and cost-effective improvement scenarios.addressing gaps and opportunities.
• Facilitate meetings, validate findings and obtain agreement with stakeholders.
• Produce reports and present gaps, findings and solutions to client management.

Skills

IT GRC

Threat Risk Assessment

Policy Review

Audit & Reporting

Job description

ITSEC Asia is an international information security firm offering a wide range of high-quality information security services and solutions in Singapore.

We are looking for a Senior/Lead consultant who will be responsible for executing IT GRC related consultancy and assessment tasks for our client. It entails going on site, working closely with client and ITSEC colleague to bring the project to a fruitful conclusion in the interest of all stakeholders.

In line with System Development Life Cycle or per project requirements:

• Provide & Develop comprehensive consultation/assessment/evaluation/audit/reviewing effort on clients projects or a routine exercise in accordance to their information security goals and policies;
• Conducting Threat Risk Assessment, Review Adequacy of Controls/System Architecture in compliance with policies, standard and mindful of cyber security landscape are routine exercises;
• Provide recommendation on improvements to be made, and propose cost effective scenarios/solutions to address areas of improvement;
• Facilitate meetings, validate finding and obtain agreement;
• Produce report, communicates and present gaps/finding/solutions to clients management/executive team.

It would be advantage he/she comes with System, Network, Wired and Wireless knowledge and experience.

Required Certificates : CISSP or CISA or CISM or CRISC or GCREM or GCIH or ISSAP