Cybersecurity Governance, Risk and Compliance; GRC) Lead

Cybersecurity Governance, Risk and Compliance (GRC) Lead (up to $15,000/ Attractive Bonus/ Central/ Permanent Role)

Location:
Central Area

Salary: up to $15,000 + Attractive Bonus & Benefits

Permanent Role

• Develop, implement, and maintain cybersecurity policies, standards, and procedures in line with business objectives, regulatory requirements, and industry best practices.
• Lead the Security Governance and Assurance team and drive continuous improvements in cybersecurity processes, efficiency, and automation.
• Conduct cybersecurity risk assessments, review security exceptions and risk acceptance requests, and recommend appropriate mitigation measures.
• Oversee cybersecurity vulnerabilities, security control gaps, and remediation efforts across IT systems, applications, and infrastructure.
• Monitor regulatory developments and ensure compliance with applicable cybersecurity regulations, MAS Notices, and industry standards.
• Oversee security assurance activities, including Vulnerability Assessment and Penetration Testing (VAPT), red-team exercises, and tabletop exercises.
• Coordinate internal and external IT security audits and ensure timely and effective remediation of audit findings.
• Develop and monitor cybersecurity metrics and Key Risk Indicators (KRIs), providing regular reports on security risks and control effectiveness to senior management and risk committees.
• Collaborate with the CISO, business units, and technology teams to strengthen cybersecurity governance and align security initiatives with business objectives.

• Bachelor’s Degree in computer science/ Cybersecurity/ Information Security or related certifications.
• Minimum of 10 years of experience in IT governance, cybersecurity risk management, or compliance, preferably in financial services or the payments industry.
• Must have relevant experience in the financial services industry, with strong knowledge of MAS Technology Risk Management (TRM) Guidelines and the ability to engage confidently with MAS and other regulatory stakeholders.
• Proven experience in managing key technology and cybersecurity risks, strengthening security policies and control frameworks, protecting Critical Information Infrastructure (CII), and overseeing audit compliance and Cybersecurity Code of Practice (CCoP) requirements.
• Experience in assessing emerging technology risks, particularly Artificial Intelligence (AI) and quantum computing
  , would be a strong advantage.
• Prior hands-on experience in cybersecurity, IT infrastructure, or technology risk management is highly desirable, although the role primarily focuses on governance, risk, compliance, and assurance.
• Relevant professional certifications such as CISA, CISM, CRISC, CISSP, other ISC2 certifications, or recognised cybersecurity Governance, Risk and Compliance (GRC) qualifications are preferred.

Careerally Pte Ltd | EA Licence: 24C2215
Ooi Chuan Yi (Jacky)| EA Registration No: R