GRC Consultant

Key Responsibilities

· Developing and maintaining cybersecurity policies, risk assessments and compliance programs for various frameworks.

· Collaborate with various stakeholders, coordinate compliance audits and to streamline data collection, control testing and reporting.

· Identify and mitigate cybersecurity risks.

· Ensure adherence to regulations and standards.

· Provide technical guidance to align security with business objectives

Required Skills & Qualification

· At least3-7 years of experience in IT Governance or risk management with 3 to 5 years of relevant experience specifically in IT Governance and/or Risk management.

· Candidates from financial/payment industry and familiar with MAS & CCOP regulatory requirements or equivalent are preferred.

· Candidates with experience in IT/Cyber operations/governance/audit/regulatory compliance who are keen to explore a career in IT Governance and risk management are welcome to apply.

· Strong knowledge of regulatory requirements, IT Governance practices, operations risk management processes and industry trends/practices (e.g. NIST framework, MAS requirements, ISO 27001 standard, PS Act, etc.).

· Certifications such as CGEIT, CISA, CISM, CISSP, CRISC or any relevant certification is an advantage.

· Good project management, time management and problem-solving skills.
An eye for details, and able to work well under pressure and respond to tight deadlines.

· Proactive team player and able to work independently with minimal supervision.

· Good communication, presentation and business writing skills.

· Possess a strong control and process management mindset, able to perform deep-dive investigations and crunching for control and process issues.