Senior Security Consultant (Information Risk Management & GRC)

OLIVER JAMES ASSOCIATES (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 140,000 - 200,000; Part time

Job summary

OLIVER JAMES ASSOCIATES (SINGAPORE) PTE. LTD. is seeking a Senior Security Consultant to lead information risk management and regulatory compliance efforts on a 12-month contract in Singapore.

You will guide technology risk activities, engage with senior management, and collaborate with audit, compliance and cyber security teams. The role demands extensive experience in GRC, banking or other regulated financial services environments, and familiarity with MAS TRM guidelines.

Qualifications

• Eight years’ experience in information risk management, technology risk, cybersecurity governance, regulatory compliance, audit or GRC.
• Background in banking, insurance, asset management or another regulated financial services environment.
• Practical knowledge of MAS TRM Guidelines, ideally with Singapore regulatory requirements.
• Experience managing regulatory inspections, audit reviews and closure of findings.
• Exposure to SOX control testing or technology-related SOX audits.
• Strong stakeholder management and written communication skills.
• Degree in Information Systems, Cybersecurity, Computer Science or related field.
• CISA, CRISC, CISSP, CISM or equivalent certification preferred.

Responsibilities

• Conduct compliance reviews and gap analyses against MAS TRM Guidelines and support regulatory engagements, inspections and information requests.
• Perform information security, technology and cyber risk assessments, identify control gaps and track remediation to closure.
• Coordinate Internal and External Audit reviews, from planning and evidence collation to response management.
• Support SOX audit activities, including control-owner engagement and evidence requests.
• Oversee cybersecurity governance, including risk and control frameworks and committee reporting.
• Manage threat intelligence assessments and advisories.
• Coordinate security incident response from a risk and governance perspective, including regulatory reporting.
• Facilitate risk and control assessments (RCSAs) and provide practical risk and compliance advice.
• Prepare risk reports, dashboards and decision papers for senior management and governance committees.

Skills

Information risk management

Regulatory compliance

Cybersecurity governance

Stakeholder management

Written communication

Education

Bachelor's degree in Information Systems, Computer Science or related field

Job description

Senior Security Consultant - Information Risk Management & GRC (12-Month Contract)

Location: Singapore | Contract: 12 months

Our client, a regulated financial services organisation in Singapore, is looking for an experienced Senior Security Consultant to join on a 12-month contract. You’ll lead and support information security governance, regulatory compliance, and technology and cyber risk activities, working with stakeholders across the business, technology, cybersecurity, audit, compliance and senior management.

What you’ll be doing

• Conducting compliance reviews and gap analyses against the MAS Technology Risk Management (TRM) Guidelines, and supporting regulatory engagements, inspections and information requests
• Performing information security, technology and cyber risk assessments, identifying control gaps and tracking remediation through to closure
• Coordinating Internal and External Audit reviews, from planning and evidence collation to response management
• Supporting SOX audit activities, including control-owner engagement and evidence requests
• Overseeing cybersecurity governance, including risk and control frameworks and committee reporting
• Managing FINTEL advisories and threat intelligence assessments
• Coordinating security incident response from a risk and governance perspective, including regulatory reporting
• Facilitating RCSAs and providing practical risk and compliance advice
• Preparing risk reports, dashboards and decision papers for senior management and governance committees

What you’ll bring

• Around 8 years’ experience in information risk management, technology risk, cybersecurity governance, regulatory compliance, audit or GRC
• Background in banking, insurance, asset management or another regulated financial services environment
• Practical knowledge of MAS TRM Guidelines, ideally with experience of Singapore financial-sector regulatory requirements
• Experience managing regulatory inspections, audit reviews and closure of findings
• Exposure to SOX control testing or technology-related SOX audits
• Strong stakeholder management and written communication skills, with the confidence to engage senior management, auditors and regulators
• Degree in Information Systems, Cybersecurity, Computer Science or a related field
• CISA, CRISC, CISSP, CISM or an equivalent certification is preferred