Technology & Security GRC Manager

TIGER TRADE TECHNOLOGY PTE. LTD.; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A leading tech company in Singapore is seeking an experienced Information Security professional. The role involves ensuring compliance with IT regulations, managing audits, and engaging with R&D teams to mitigate cyber risks. Candidates should have a Bachelor’s degree in Computer Science and at least 5 years of experience in technology compliance. Bilingual in English and Mandarin is required to facilitate collaboration with stakeholders from China.

Qualifications

• Minimum 5 years of experience in technology compliance, security assurance, or related fields.
• Well-versed in industry regulations such as ISO27001, SOC2, NIST, PCI, PDPA/GDPR.
• Bilingual in English and Mandarin for cross-border collaborations.

Responsibilities

• Work with cross-functional teams to ensure compliance with IT regulatory expectations.
• Manage audit and regulatory reviews with internal and external stakeholders.
• Identify technology and cyber risks, designing mitigation measures.

Skills

Communication skills

Project management

Knowledge of compliance regulations

Technical risk mitigation

Ability to work in a fast-paced environment

Education

Bachelor’s degree in Computer Science or related field

Job description

About the Team

You will join the dynamic Group Information Security team, operating as a vital second line of defence (2LoD) function. With a footprint in multiple global regions, the security team plays a pivotal role in identifying, assessing, mitigating, and monitoring technology and cyber risks, whether they originate from internal projects, existing systems, or external partnerships.

Key Responsibilities

1. Effectively work with cross-functional teams to drivesecurity compliance with local IT regulatory expectations by understanding theregulatory requirements and establishing policies and processes. (e.g., ISO 27001, NIST CSF, SOC 2, and MAS TRM) and best practices.
2. Manage audit and regulatory reviews, includingcoordination, communication, and required actions with internal auditors,external auditors, regulators, and internal stakeholders as appropriate.
3. Engage with the group Product and R&D teams toproactively identify risks at a detailed and technical level, design andimplement technical risk mitigation measures.
4. Proactively track and monitor the implementation ofagreed-upon technology and cyber risk mitigation measures and conducteffectiveness reviews to ensure risk reduction to acceptable levels.
5. Any other tasks as allocated by your direct line manager.

Requirements

1. Bachelor’s degree in computer science, information security, data privacy, or a related field.
2. Minimum 5 years of experience in technology compliance, security assurance, or related fields.
3. Well-versed with industry regulations and compliance, such as: MAS TRMG and Cyber Hygiene, ISO27001, SOC2, NIST, PCI, PDPA/GDPR, etc.
4. Demonstrates ability to lead and manage projects across multiple teams or groups, including documenting milestones and proactively providing updates to leaders/stakeholders.
5. Experience working in a matrix model as a Group IS team member to support a multi-region business team with security and technology issues, serving as a tech & security business partner (BP).
6. Ability to communicate clearly and effectively on both technology/development issues/concerns to any stakeholders.
7. Strong capability for running multiple tasks simultaneously, understanding priority, and delivery timeline. Comfortable with ambiguity and changes in a fast-paced environment。
8. Bilingual in English and Mandarin to facilitatecross-border collaborations with stakeholders from China