Technology & Security GRC Manager

TIGER TRADE TECHNOLOGY PTE. LTD.; Singapore; On-site; SGD 85,000 - 110,000; Full time

Job summary

A leading technology firm in Singapore seeks an experienced professional for its Information Security team. The candidate will manage technology compliance and security assurance, engage with various teams to mitigate risks, and conduct audits. Essential qualifications include a Bachelor’s degree in computer science and at least 5 years of relevant experience, with a strong grasp of regulations like ISO 27001 and SOC 2. Fluency in English and Mandarin is required for cross-border collaboration.

Qualifications

• Minimum 5 years of experience in technology compliance, security assurance, or related fields.
• Well-versed with industry regulations and compliance such as ISO27001, SOC2, and NIST.

Responsibilities

• Work with cross-functional teams to ensure security compliance with local IT regulations.
• Manage audit and regulatory reviews with auditors and internal stakeholders.
• Engage with product and R&D teams to identify and mitigate risks.

Skills

Technology compliance

Security assurance

Project management

Bilingual in English and Mandarin

Education

Bachelor’s degree in computer science or related field

Job description

About the Team

You will join the dynamic Group Information Security team, operating as a vital second line of defence (2LoD) function. With a footprint in multiple global regions, the security team plays a pivotal role in identifying, assessing, mitigating, and monitoring technology and cyber risks, whether they originate from internal projects, existing systems, or external partnerships.

Key Responsibilities

1. Effectively work with cross-functional teams to drivesecurity compliance with local IT regulatory expectations by understanding theregulatory requirements and establishing policies and processes. (e.g., ISO 27001, NIST CSF, SOC 2, and MAS TRM) and best practices.
2. Manage audit and regulatory reviews, includingcoordination, communication, and required actions with internal auditors,external auditors, regulators, and internal stakeholders as appropriate.
3. Engage with the group Product and R&D teams toproactively identify risks at a detailed and technical level, design andimplement technical risk mitigation measures.
4. Proactively track and monitor the implementation ofagreed-upon technology and cyber risk mitigation measures and conducteffectiveness reviews to ensure risk reduction to acceptable levels.
5. Any other tasks as allocated by your direct line manager.

Requirements

1. Bachelor’s degree in computer science, information security, data privacy, or a related field.
2. Minimum 5 years of experience in technology compliance, security assurance, or related fields.
3. Well-versed with industry regulations and compliance, such as: MAS TRMG and Cyber Hygiene, ISO27001, SOC2, NIST, PCI, PDPA/GDPR, etc.
4. Demonstrates ability to lead and manage projects across multiple teams or groups, including documenting milestones and proactively providing updates to leaders/stakeholders.
5. Experience working in a matrix model as a Group IS team member to support a multi-region business team with security and technology issues, serving as a tech & security business partner (BP).
6. Ability to communicate clearly and effectively on both technology/development issues/concerns to any stakeholders.
7. Strong capability for running multiple tasks simultaneously, understanding priority, and delivery timeline. Comfortable with ambiguity and changes in a fast-paced environment。
8. Bilingual in English and Mandarin to facilitatecross-border collaborations with stakeholders from China