GRC Consultant

Your tasks

• Developing and maintaining cybersecurity policies, risk assessments and compliance programs for various frameworks.
• Collaborate with various stakeholders, coordinate compliance audits and to streamline data collection, control testing and reporting.

• Identify and mitigate cybersecurity risks.
• Ensure adherence to regulations and standards.

• Provide technical guidance to align security with business objectives

Requirements

Required Skills & Qualification

• At least3-7 years of experience in IT Governance or risk management with 3 to 5 years of relevant experience specifically in IT Governance and/or Risk management.
• Candidates from financial/payment industry and familiar with MAS & CCOP regulatory requirements or equivalent are preferred.

• Candidates with experience in IT/Cyber operations/governance/audit/regulatory compliance who are keen to explore a career in IT Governance and risk management are welcome to apply.
• Strong knowledge of regulatory requirements, IT Governance practices, operations risk management processes and industry trends/practices (e.g. NIST framework, MAS requirements, ISO 27001 standard, PS Act, etc.).

• Certifications such as CGEIT, CISA, CISM, CISSP, CRISC or any relevant certification is an advantage.
• Good project management, time management and problem-solving skills.

An eye for details, and able to work well under pressure and respond to tight deadlines.

• Proactive team player and able to work independently with minimal supervision.
• Good communication, presentation and business writing skills.

• Possess a strong control and process management mindset, able to perform deep-dive investigations and crunching for control and process issues.