IT Security Consultant (GRC) #IJF

Job Summary

You will support and lead cybersecurity initiatives to develop policies, conduct risk assessments, manage incidents, and promote cybersecurity culture, ensuring robust protection of IT/OT environments aligned with organizational goals.

Responsibilities

• Develop, implement, and periodically review cybersecurity policies, standards, procedures, and governance frameworks to align with organizational requirements
• Monitor and enforce compliance with cybersecurity policies and standards across IT and OT environments
• Maintain and update cybersecurity documentation including policies, procedures, guidelines, risk registers, and system records to ensure accuracy and currency
• Conduct cybersecurity risk assessments and assurance reviews on IT and OT systems to identify vulnerabilities, threats, and control gaps
• Lead or support vulnerability management activities including assessments, remediation tracking, and reporting
• Provide technical support for implementing, administering, and maintaining cybersecurity technologies, platforms, and security controls
• Lead or support cybersecurity incident response, investigation, and recovery activities to minimize impact
• Coordinate post-incident reviews and recommend corrective actions to strengthen cybersecurity controls
• Support cybersecurity awareness programs, campaigns, and training initiatives to foster a strong cybersecurity culture organization-wide
• Facilitate cybersecurity exercises, simulations, and tabletop exercises to evaluate organizational preparedness
• Develop, monitor, and report cybersecurity metrics, key risk indicators (KRIs), and key performance indicators (KPIs) for management reporting
• Lead or support initiatives related to cybersecurity, data governance, and AI governance to enhance organizational security posture
• Undertake cybersecurity-related projects and perform other duties as assigned by the reporting manager

Required competencies

• Bachelor Degree or Diploma in Information Security or related field
• Minimum of 4 years relevant experience in cybersecurity roles
• Strong knowledge and understanding of IT infrastructure and security operations
• Knowledge of Endpoint Security, Intrusion Detection and Prevention Systems (IDPS), Web Application Firewall (WAF), Advanced Persistent Threats (APT), Firewalls (FW), and Cloud Security
• Experience working with cybersecurity policies, standards, procedures, and governance frameworks

Other Information

Interested applicants, please Email, and look for Jensen Fang Lifa, jensenfang@recruitexpress.com.sg Recruit Express Pte Ltd EA License No. 99C4599 EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.