全职 GRC Consultant 工作, 薪水 up to SGD 7,000, PCS SECURITY PRIVATE LIMITED East Region (Singapore) 公司招聘中 - Ricebowl

Pre-requisition

·      Possess Diploma or Degree in CyberSecurity, Information Technology or related field.

·      At least 6 – 8 years of working experience in cyber security consultancy with relevant experience on security governance

JobDescription:

·      Conduct cybersecurity risk assessments, compliance reviews and security gap analysis.

·      Develop and review cybersecurity policies, standards, procedures and governance frameworks.

·      Assess compliance against industry standards and regulatory requirements, including ISO 27001, NIST CSF,PDPA and applicable Singapore cybersecurity regulations.

·      Identify cybersecurity risks,recommend mitigation measures and develop remediation plans.

·      Conduct cybersecurity maturity assessments and recommend security improvement roadmaps.

·      Support internal and external security audits, including tracking and closure of findings.

·      Perform third-party and supply chain cybersecurity risk assessments.

·      Provide cybersecurity advisory and consultancy services to customers.

·      Prepare assessment reports, risk registers, management presentations and project deliverables.

·      Lead high-severity security incidents, coordinating functional technical response across IT teams,customer-facing teams and executive leadership.

·      Develop and execute incident response simulations to validate response plans, streamline customer communications, standardize executive reporting and reduce MTTR.

·      Engage customers and stakeholders to understand business requirements and recommend appropriate cybersecurity controls

TechnicalSkill Sets:

-         Must Have

·      Knowledge of cybersecurity governance, risk management and compliance frameworks.

·      Familiarity with ISO 27001,NIST CSF, CIS Controls and relevant Singapore cybersecurity regulations.

·      Strong analytical,documentation, communication and stakeholder management skills.

-         Good to Have

·      Experience in cybersecurity assessments, security audits or GRC consultancy is preferred

·      Relevant certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 are advantageous.