GRC Consultant

Key Responsibilities

. Create, implement, and maintain cybersecurity policies, risk assessments, and compliance programs across multiple frameworks.

. Partner with cross-functional stakeholders, coordinate compliance audits, and help streamline data collection, control testing, and reporting.

. Assess, identify, and mitigate cybersecurity risks.

. Support continuous adherence to applicable regulations and standards.

. Deliver technical guidance to ensure security initiatives align with business objectives.

Required Skills & Qualification

. Minimum 3-7 years of experience in IT Governance or risk management, including 3 to 5 years of relevant experience specifically in IT Governance and/or Risk management.

. Candidates with experience in the financial/payment industry and familiarity with MAS & CCOP regulatory requirements or equivalent are preferred.

. Candidates with experience in IT/Cyber operations/governance/audit/regulatory compliance who are interested in building a career in IT Governance and risk management are encouraged to apply.

. Demonstrated knowledge of regulatory requirements, IT Governance practices, operations risk management processes, and relevant industry trends/practices (e.g. NIST framework, MAS requirements, ISO 27001 standard, PS Act, etc.).

. Certifications such as CGEIT, CISA, CISM, CISSP, CRISC, or any relevant certification are an advantage.

. Strong project management, time management, and problem-solving abilities.
Detail-oriented, able to work effectively under pressure, and capable of meeting tight deadlines.

. Proactive team player with the ability to work independently with minimal supervision.

. Excellent communication, presentation, and business writing skills.

. Solid control and process management mindset; able to conduct deep-dive investigations and analyze control and process issues.