The IT Risk and Compliance Specialist will enhance the technology risk governance culture and manage cyber risks across the organization. Responsibilities include providing expert cybersecurity advice, reviewing ICT policies, ensuring compliance with standards, monitoring tech projects, participating in audits, and conducting gap analyses. The role requires collaboration with internal stakeholders and establishing strong compliance and risk management frameworks.
As a Governance Risk and Compliance Specialist to join our team, this role is crucial in developing and maintaining a robust culture of technology and cybersecurity risk governance across our organization.
The ideal candidate will have at least 5 years of relevant experience in ICT cybersecurity, data security, audit management, governance, and risk compliance management. He or She will be responsible for providing expert advice on cyber security requirements, reviewing and establishing ICT policies, and supporting various aspects of our tech governance framework.
- Develop the culture of Tech risk governance and management across the organisation, and ensure proper accountability in the management, tracking and reporting of tech and cyber risks.
- Provide subject matter advice to internal stakeholders on cyber security requirements that the Authority is required to comply with, including Client internal policies and standards, as well as policies and standards from GovTech and Cyber Security Agency of Singapore.
- Review and establish ICT policies and process controls and conduct compliance checks.
- Support team lead and work with internal stakeholders to:
- Track and monitor tech projects and initiatives to meet compliance requirements.
- Track and monitor of Key Risk Indicators and Control Self-Assessment as part of Tech governance framework.
- Track and monitor incident reporting, including reviewing, monitoring, and reporting on the corrective measures and improvement areas.
- Participate in consultation and conduct gap analysis against new or revised requirements.
- Assess and seek waiver approvals for deviations and risk treatment strategies.
- Organise risk forums, including monitoring of action plans.
- Coordinate and facilitate IT / cyber security audits.
o Track remediation plans to address audit findings.
o Follow up on remediation actions, security and risk assessments with respective stakeholders and project and application managers.
- Good years of relevant experience in ICT cybersecurity, data security, audit management, governance, risk and compliance management
- Relevant certifications in IT governance, IT audit, cyber or data security (e.g. CISSP, CISM, CISA, etc.) preferred.
- Ability to work with cross-functional, multi-disciplined team to operationalise monitor security policies and procedures.
- Knowledge of Instruction Manual 8 and CSA Cybersecurity Code of Practice preferred.
- Technical knowledge of security vulnerabilities, validation of remediations and risk assessments.
- Relevant experience in data visualisation and analytics..
Top Skills
Cybersecurity
Unison Consulting Singapore Office
1 Changi Business Park Crescent, , Plaza 8 #03-06 Tower A, Singapore, , Singapore, 486025
Unison Consulting Singapore Office
#12-00, 63 Market Street, Bank of Singapore Center, Singapore, , Singapore, 048942
Similar Jobs
Be an Early Applicant
As a Chinese Speaking Verifications Specialist, your role involves implementing KYC procedures, conducting AML screenings, and monitoring client activities for suspicious behavior. You will carry out compliance audits, manage compliance records, and ensure adherence to regulatory requirements while collaborating with various stakeholders.
Be an Early Applicant
As a Security Operations Associate, you will protect digital assets by detecting, assessing, and responding to cybersecurity threats. Responsibilities include conducting security investigations, utilizing SIEM tools, collaborating on security strategies, and participating in incident response efforts.
Be an Early Applicant
As a Security Operations Senior Associate, you will enhance cybersecurity by analyzing threats, responding to incidents, and safeguarding digital assets. Responsibilities include investigating network anomalies, managing firewall policies, incident response support, and collaborating with teams to propose security improvements.
What you need to know about the Singapore Tech Scene
The digital revolution has driven a constant demand for tech professionals across industries like software development, data analytics and cybersecurity. In Singapore, one of the largest cities in Southeast Asia, the demand for tech talent is so high that the government continues to invest millions into programs designed to develop a talent pipeline directly from universities while also scaling efforts in pre-employment training and mid-career upskilling to expand and elevate its workforce.
