Senior Security Consultant - IT Governance, Risk, Compliance and Enterprise Security Architect

LANTU EMPLOYMENT AGENCY PTE. LTD.; Singapore; Hybrid; SGD 80,000 - 120,000; Full time

Job summary

A consulting agency in Singapore is seeking a Senior/Lead Consultant specializing in IT Governance, Risk, and Compliance (GRC). The ideal candidate will have at least 6 years of experience in designing and implementing IT security architecture, alongside relevant certifications. This hybrid role requires expertise in risk management and compliance frameworks, with a focus on developing robust policies and strategies to ensure secure IT systems. Excellent problem-solving abilities and strong communication skills are essential.

Qualifications

• Strong knowledge of IT governance, risk management, and compliance frameworks.
• Experience in conducting risk assessments and developing risk mitigation strategies.
• Familiar with relevant regulatory requirements and industry standards.

Responsibilities

• Conduct comprehensive risk assessments and identify potential vulnerabilities.
• Develop and implement IT policies, procedures, and risk mitigation strategies.
• Provide expert guidance on regulatory compliance and industry best practices.

Skills

IT governance

Risk management

Compliance

Network Security Engineering

Problem-solving

Analytical skills

Interpersonal skills

Education

Bachelor's or master's degree in IT, Computer Science, or a related field

Job description

Role Description

We are seeking an experienced Senior/Lead Consultant specializing in IT Governance, Risk, and Compliance (GRC) to join our team. In this hybrid role, you will manage and oversee IT GRC activities, ensuring alignment with industry standards and regulatory requirements. Your expertise will contribute to building secure, compliant, and resilient IT systems.

Key Responsibilities

Governance, Risk, and Compliance

• Conduct comprehensive risk assessments and identify potential vulnerabilities.
• Develop and implement IT policies, procedures, and risk mitigation strategies.
• Provide expert guidance on regulatory compliance and industry best practices.

Project Lifecycle Involvement

• Interpret and define security requirements for IT systems.
• Design and implement robust system security architectures.
• Evaluate risks from deviations and non‑compliance issues, recommending solutions.
• Support security acceptance testing and continuous security assessments.

The Candidate shall possess the following professional qualification and experience:

a. minimum six (6) years of experience in designing, implementing and testing system security architecture of similar scale; OR

b. minimum two (2) years of experience in designing, implementing and testing system security architecture of similar scale – plus having attained at least one (1) of the following:

i. Information Security Masters degree from U.S. National Centres of Academic Excellence in Cyber Defence (NSA/DHS CAE) or those certified by U.K. National Cyber Security Centre (GCHQ’s NCSC); or

ii. CREST Registered Technical Security Architect (CRTSA); or

iii. Information Systems Security Architecture Professional (CISSP‑ISSAP).

Minimum Qualifications

• Strong knowledge of IT governance, risk management, and compliance frameworks
• Experience in conducting risk assessments and developing risk mitigation strategies
• Experience in Network and System Security Engineering and Enterprise Security Architectural Design
• Familiar with relevant regulatory requirements and industry standards
• Excellent problem‑solving and analytical skills
• Strong communication and interpersonal skills
• Ability to work independently and collaboratively in teams
• Certifications such as CISSP and CRISC are highly preferred
• Minimum of 5 years of experience in IT governance, risk, and compliance roles
• Bachelor's or master's degree in IT, Computer Science, or a related field
• Security clearance (CAT 1 or 2) required for government project