GRC Consultant

Pre-requisition

• Possess Diploma or Degree in CyberSecurity, Information Technology or related field.
• At least 6 – 8 years of working experience in cyber security consultancy with relevant experience on security governance

JobDescription:

• Conduct cybersecurity risk assessments, compliance reviews and security gap analysis.
• Develop and review cybersecurity policies, standards, procedures and governance frameworks.

• Assess compliance against industry standards and regulatory requirements, including ISO 27001, NIST CSF,PDPA and applicable Singapore cybersecurity regulations.
• Identify cybersecurity risks,recommend mitigation measures and develop remediation plans.

• Conduct cybersecurity maturity assessments and recommend security improvement roadmaps.
• Support internal and external security audits, including tracking and closure of findings.

• Perform third-party and supply chain cybersecurity risk assessments.
• Provide cybersecurity advisory and consultancy services to customers.

• Prepare assessment reports, risk registers, management presentations and project deliverables.
• Lead high-severity security incidents, coordinating functional technical response across IT teams,customer-facing teams and executive leadership.

• Develop and execute incident response simulations to validate response plans, streamline customer communications, standardize executive reporting and reduce MTTR.
• Engage customers and stakeholders to understand business requirements and recommend appropriate cybersecurity controls

TechnicalSkill Sets:

• Must Have
• Knowledge of cybersecurity governance, risk management and compliance frameworks.

• Familiarity with ISO 27001,NIST CSF, CIS Controls and relevant Singapore cybersecurity regulations.
• Strong analytical,documentation, communication and stakeholder management skills.

• Good to Have
• Experience in cybersecurity assessments, security audits or GRC consultancy is preferred

• Relevant certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 are advantageous.