Information Security GRC Specialist for a Financial Institution

2 weeks ago

Singapore Charterhouse Partnership Singapore Full time

Job Posting by Sheralynn Tjioe, Associate Director (Cyber Security and GRC) Recruitment at Charterhouse Asia

SheralynnT@charterhouse.com.sg

Information Security GRC Specialist for a Financial Institution (5-10 Years)

The Information Security GRC Specialist is responsible for overseeing Information Security compliance assessments across the organisation’s technology infrastructure. This role ensures that critical security controls are implemented effectively, aligned with industry standards and internal policies, to safeguard the organisation’s assets and reduce security risks.

*Must be a specialist in Information Security

RESPONSIBILITIES:

Evaluate Security Processes: Conduct in-depth assessments of essential Information Security processes, including Patch Management and Open-Source Vulnerability Management, across technology systems. Ensure that necessary security controls are in place to effectively mitigate risks.

Collaborate Across Teams: Partner with IT, operations, and security teams to identify, prioritize, and resolve vulnerabilities within production environments. Act as a liaison between technical and non-technical teams, ensuring security issues are addressed promptly and clearly communicated.

Monitor Vulnerability Resolution: Track the progress of vulnerability remediation efforts, ensuring timely resolution according to deadlines. Conduct follow-up checks to verify that corrective actions are successfully implemented and all risks are mitigated.

Reporting & Communication: Provide regular updates and detailed reports to risk management committees, highlighting outstanding vulnerabilities, their potential impact, and the status of remediation efforts. Keep senior leadership informed about critical security gaps.

Risk Monitoring & Control: Track and report on Key Risk Indicators (KRIs) to assess the organisation’s exposure to security risks. Conduct Risk Control Self-Assessments (RCSAs) to ensure existing controls are effective and mitigate risks.

Support Security Initiatives: Contribute to various security-related projects, including audits, process improvements, policy updates, and compliance efforts, to continually enhance the organisation’s overall security posture.

REQUIREMENTS:

Educational Background: Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity, or a related field.

Experience: Minimum of 5 years in managing internal controls within an IT security environment, with a strong focus on compliance and security best practices.

Regulatory Knowledge: Strong understanding of local regulatory requirements and cybersecurity frameworks, such as MAS TRMG Guidelines and Cyber Security Hygiene standards.

Certifications: IT security or related certifications (e.g., CISSP, CCNA, CEH) are highly desirable.

Cybersecurity Awareness: Excellent awareness of current trends and developments in the cybersecurity field, with a proactive approach to staying informed on emerging threats and solutions.

Collaboration Skills: Strong teamwork and communication skills, with the ability to manage detailed work and remain calm under pressure.

Self-Starter: Highly self-motivated with the ability to manage multiple tasks, meet deadlines, and work independently in a fast-paced environment.

Please contact Sheralynn Tjioe at SheralynnT@charterhouse.com.sg for a confidential discussion.

EA License no: 16S8066 | Reg no.: R1878306

Only successful candidates will be notified.

  • Information Security GRC Lead

    3 weeks ago

    Singapore Randstad Singapore Full time

    Information Security GRC Lead | Cloud security | NIST Join to apply for the Information Security GRC Lead | Cloud security | NIST role at Randstad Singapore 5 days ago Be among the first 25 applicants Get AI-powered advice on this job and more exclusive features. About the company Our client is an established listed company with over 30 years of experience...

  • Senior Cyber Security Specialist

    2 days ago

    Singapore Hays Full time

    Senior Cyber Security Specialist (GRC) Hays Technology is looking for a Senior Cyber Security Specialist (GRC) to help our client to provide Governance, Risk, and Compliance expertise and to conduct security assessments to ensure information assets are secured. - Conducting security control assessments, threat and vulnerability assessments, risk and reward...

  • Information Security GRC Lead | Cloud security | NIST

    7 days ago

    Singapore Randstad Singapore Full time

    Overview Information Security GRC Lead | Cloud security | NIST About the company Our client is an established listed company with over 30 years of experience who is a market leader within their industry. As part of their plan to invest in technology, they are now hiring an experienced IT Governance Risk & Compliance (GRC) Lead to join their team. About the...

  • GRC Specialist

    1 week ago

    Singapore Sagl Consulting Full time

    Job Summary: We are seeking a Lead GRC Specialist to drive the delivery of Governance, Risk, and Compliance (GRC) solutions. The role involves balancing business and technical priorities, documenting requirements, designing solutions, and guiding implementation for platforms such as ServiceNow, Archer, and MetricStream. Key Responsibilities: Translate...

  • GRC Specialist

    2 days ago

    Singapore Sagl Consulting Full time $150,000 - $200,000 per year

    Job Summary:We are seeking a Lead GRC Specialist to drive the delivery of Governance, Risk, and Compliance (GRC) solutions. The role involves balancing business and technical priorities, documenting requirements, designing solutions, and guiding implementation for platforms such as ServiceNow, Archer, and MetricStream.Key Responsibilities:Translate business...

  • Senior Information Security GRC Analyst

    1 week ago

    Singapore RANDSTAD PTE. LIMITED Full time

    Be a key driver in shaping our cybersecurity risk posture and influencing board-level security decisions. Work closely with CISO and senior leaders to embed security governance across all business units About the company Our client is an established listed company with over 30 years of experience who is a market leader within their industry. As part...

  • Security GRC Analyst

    1 week ago

    Singapore Wise Full time

    Company Description Wise is a global technology company, building the best way to move and manage the world’s money. Min fees. Max ease. Full speed. Whether people and businesses are sending money to another country, spending abroad, or making and receiving international payments, Wise is on a mission to make their lives easier and save them money. As...

  • Lead, Security Grc

    2 weeks ago

    Singapore COINBASE SINGAPORE PTE. LTD. Full time

    **GRC Security at Coinbase Coinbase stores more digital currency than any company in the world, making us a prime target on the internet. Security is core to our mission and has been a key competitive differentiator for us as we scale worldwide. Crucial to scaling is building and running a security compliance program that reflects how we protect the data and...

  • Security GRC Analyst

    4 weeks ago

    Singapore Wise Full time

    Company Description Wise is a global technology company, building the best way to move and manage the world's money.Min fees. Max ease. Full speed. Whether people and businesses are sending money to another country, spending abroad, or making and receiving international payments, Wise is on a mission to make their lives easier and save them money. As part...

  • Grc

    1 week ago

    Singapore Good Job Creations Pte Ltd Full time

    1. Job Brief 1. Reporting - Head of Security **Responsibilities**: - Develop IT GRC management framework and processes that gel with Security Strategy. - Develop and maintain Security Policy. - Ensuring that requirements in IT Audit, Standard, Policy, Compliance and Risk controls are met. - Responsible for the maintaining the Risk Registries. - Define...