GRC Consultant - #1174946

Pre-requisition

· Possess Diploma or Degree in CyberSecurity, Information Technology or related field.

· At least 6 – 8 years of working experience in cyber security consultancy with relevant experience on security governance

JobDescription

· Conduct cybersecurity risk assessments, compliance reviews and security gap analysis.

· Develop and review cybersecurity policies, standards, procedures and governance frameworks.

· Assess compliance against industry standards and regulatory requirements, including ISO 27001, NIST CSF,PDPA and applicable Singapore cybersecurity regulations.

· Identify cybersecurity risks,recommend mitigation measures and develop remediation plans.

· Conduct cybersecurity maturity assessments and recommend security improvement roadmaps.

· Support internal and external security audits, including tracking and closure of findings.

· Perform third-party and supply chain cybersecurity risk assessments.

· Provide cybersecurity advisory and consultancy services to customers.

· Prepare assessment reports, risk registers, management presentations and project deliverables.

· Lead high-severity security incidents, coordinating functional technical response across IT teams,customer-facing teams and executive leadership.

· Develop and execute incident response simulations to validate response plans, streamline customer communications, standardize executive reporting and reduce MTTR.

· Engage customers and stakeholders to understand business requirements and recommend appropriate cybersecurity controls

TechnicalSkill Sets

- Must Have

· Knowledge of cybersecurity governance, risk management and compliance frameworks.

· Familiarity with ISO 27001,NIST CSF, CIS Controls and relevant Singapore cybersecurity regulations.

· Strong analytical,documentation, communication and stakeholder management skills.

- Good to Have

· Experience in cybersecurity assessments, security audits or GRC consultancy is preferred

· Relevant certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 are advantageous.