Cyber Governance, Risk & Compliance (GRC) Principal Consultant

System Analyst

Digital and Service Offering Manager, APM

Corporate Risk Analyst

Role Description: This role will be working at the customer premise. <ul><li>The Governance, Risk, and Compliance (GRC) candidate will be responsible for developing, implementing, and managing the customer GRC requirement.</li><li>The jobs scope involve ensuring compliance with establishing governance processes, assessing risks, and implementing effective risk management practices to protect the organization’s assets, reputation, and stakeholders.</li><li>Work together with customer to develop and maintain the organization’s GRC strategy and framework, ensuring alignment with business objectives and regulatory requirements.</li><li>Lead the establishment and maintenance of governance processes across various departments, ensuring consistency and accountability.</li><li>Collaborate with senior leadership to draft, revise, and communicate governance policies and procedures.</li><li>Identify, assess, and prioritize risks to the organization’s operations, financial health, and reputation.</li><li>Develop and implement risk assessment methodologies and tools to prepare risk reports and dashboards for stakeholders.</li><li>Serve as the point of contact for risk management activities and promote a culture of risk awareness throughout the organization.</li><li>Oversee compliance with applicable laws, regulations, and industry standards.</li><li>Design and oversee compliance programs and training initiatives to ensure that employees understand and adhere to regulatory requirements.</li><li>Coordinate and respond to audits and regulatory examinations, ensuring all compliance issues are addressed promptly.</li><li>Stay current with industry best practices and emerging legislation impacting GRC programs.</li></ul> Responsibilities: <ul><li>Maintain/Develop cybersecurity policies, standards, and frameworks.</li><li>Ensure alignment with industry standards (e.g., CSA Cyber Trust Mark, ISO 27001, NIST, CIS, SOC 2).</li><li>Collaborate with business units to integrate security governance into business processes.</li><li>Identify, assess, and mitigate cybersecurity risks across the organization.</li><li>Conduct risk assessments and audits to evaluate vulnerabilities.</li><li>Work with technical teams to implement security controls and risk mitigation strategies.</li><li>Monitor emerging threats and recommend proactive security measures.</li><li>Ensure compliance with relevant regulations (e.g., GDPR, PDPA, HIPAA, SOX).</li><li>Lead internal and external cybersecurity audits and assessments.</li><li>Maintain compliance documentation and evidence for regulatory bodies.</li><li>Coordinate with legal and compliance teams to manage cybersecurity-related legal risks.</li></ul> Requirements: Preferred Experience: <ul><li>5+ years in cybersecurity, governance, risk, and compliance roles.</li><li>Experience in highly regulated industries such as finance, healthcare, or government.</li><li>Familiarity with security tools (GRC platforms, SIEMs, vulnerability scanners).</li></ul>

Responsibilities: <ul><li>Maintain the Project Management Office (PMO), managing communications across the contract, tracking assets &amp; documentations and monitoring the progress of work including overseeing the services of our ICT O&amp;M contractors&nbsp;&nbsp;</li><li>Utilize cloud technologies like GCC Azure, AWS and Google Cloud Platform to conduct end-to-end systems monitoring, problem resolution and to save operating costs</li><li>Familiar with local public sector projects and government policies and processes such as IM8, cybersecurity, data security</li><li>Collaborate with business &amp; technology stakeholders, ICT providers or government agencies and other external parties to drive new initiatives/enhancements</li><li>Offer support in managing, maintaining, and testing IT application systems, ensuring their efficient operation and functionality</li><li>Review project deliverables (e.g. system documentations, monthly project report, log review for privileged user access, test plan, test reports, application design/ code) to ensure the completeness for acceptance; and&nbsp;</li><li>Ensure project deliveries complies with relevant policies, standards, and guidelines, and identify and address any compliance gaps.&nbsp;</li><li>project coordination &amp; monitoring, asset management, resource tracking, meeting logistics, service/change request processing, records/document management</li><li>Perform requirement gathering, requirement analysis, business process mapping, design thinking, prepare requirement specifications, flow charts, logical diagrams, and initiate process improvements.</li><li>Agile, Software Development Life Cycle (SDLC) and testing methodologies</li></ul> Requirements: <ul><li>Bachelor’s degree in Business, Management of Information Systems, Information/ Infocom Technology, or related discipline.</li><li>8 years of experience in IT.</li><li>6 + years experience in Public sector.</li><li>Singapore Government (Public Sector) experience is mandate.</li><li>GCC Experience is additional advantage.</li><li>6+ Years Experience, Singapore Government (Public Sector) experience is mandate.</li><li>GCC Experience is additional advantage.</li><li>Maintain the Project Management Office (PMO), managing communications across the contract, tracking assets &amp; documentations and monitoring the progress of work including overseeing the services of our ICT O&amp;M contractors&nbsp;&nbsp;</li></ul>

Responsibilities: Service and digital offering management: Manages the end-to-end development and/or deployment of a portfolio of digital and service offering. Key activities include: <ul><li>Defines Area’s end-to-end strategy of assigned offering portfolio based on market assessment and feedback from Units.</li><li>Gather and evaluate Unit business requirements and conduct fit-gap analysis of global offerings, collaborate with Global teams to ensure that the offerings are fit-for-purpose for the Area.</li><li>Participates in technical development activities where required.&nbsp;</li><li>Manage and drives offering scope and roadmap.</li><li>Develop go-to-market strategy for assigned offering portfolio – customer value proposition, target segments/ customer profile, pricing and offering bundles etc.</li><li>Follows up and takes corrective actions on offering performance and quality.</li><li>Collaborates with Business Line colleagues in the Units, other Areas, and Global for best practice sharing and driving areas of improvement in assigned offering portfolio.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</li></ul>&nbsp;Customer relationship management and sales support: Supports units in: <ul><li>Creating support material for Sales Managers and Salespersons in defining, specifying, and communicating company benefits and advantages of service and digital offerings.</li><li>Identifying and describing benefits and advantages of offerings to customers in different segments where relevant.</li><li>Developing marketing activities and campaigns</li><li>Achieving targets, analysing, and maintaining service and digital offerings - product and pricing data, sales and tendering tools and pricing guidelines.</li><li>Be the subject matter expert for service and digital offerings and supports Units in customer early engagements, tender interviews and other activities as required to achieve deployment success.</li></ul> Requirements: <ul><li>Good understanding of technology/ digital topics (e.g. predictive maintenance, cybersecurity, APIs, data visualization etc), prior technical experience in capacities such as product development/ management.</li><li>Knowledge of digital product development cycles, agile methodologies.</li><li>Knowledge of product life-cycle management, methodology and tools</li></ul>

Responsibilities: <ul><li>Apply open- and closed-source collection and analysis skills to author threat and risk intelligence reports and briefings. Identify and assess all-risk events and/or changes in the operating environment that have the potential to impact company people or operations.</li><li>Serve as generalist with broad knowledge of information collection protocols and company global risk priorities while maintaining subject matter expertise within their region.</li><li>Stay up to date on global developments, including but not limited to geopolitics, relevant regulation, natural hazards, physical and cybersecurity, industry trends, and organizational changes that might influence company people, operations, or shareholders.&nbsp;</li><li>Ensure the timely and accurate communication of risk information to ERSM and cross-functional leaders to support business decision makers and crisis management efforts.&nbsp;</li><li>Support the regional ERSM leader in the execution of security and resilience programs administration, travel safety, data integrity, compliance tracking, and reporting.</li><li>Support the development of key strategic deliverables, such as risk modeling, recurring emerging risk reports, and bespoke customer-driven requests.</li><li>Develop and maintain technical knowledge of systems and data. Develop and maintain datasets from various internal and external sources to identify trends, extract insights, and measure performance.</li><li>Engage with relevant risk information and industry networks to develop and maintain appropriate skillsets and cultivate a professional network.</li><li>Work collaboratively as well as independently to advance the security and resilience of company people and operations around the world.&nbsp;</li></ul> Requirements: <ul><li>Bachelor’s degree, local educational equivalent, or commensurate experience in relevant fields.</li><li>Advanced / native fluency in English and Chinese languages (speaking and writing).</li><li>Additional language proficiencies are a plus.&nbsp;</li><li>Strong organizational, written, and verbal communications skills, including exceptional time management.</li><li>Skilled using Microsoft Office 365 (Word, PowerPoint, Excel, Teams, etc.).</li><li>Familiarity with data management tools (e.g., MS Excel, SharePoint) and analytic tools (e.g., Power BI, Tableau) is a plus.&nbsp;</li><li>Flexibility to work outside of traditional hours for meetings with global colleagues in other time zones and/or to support crisis activations.</li><li>Experience or familiarity with continuous improvement models and processes is a plus.</li><li>Understanding of basic security, risk management, crisis management, or business continuity principles is a plus.</li><li>Ability to balance multiple priorities.&nbsp;</li><li>Interest in developing in the security and risk management field.</li><li>Critical thinking skills and an innovative mindset.&nbsp;</li><li>Interest in continuous learning and skills development.</li></ul>

Skills

Industry

Location

Jobtitle

4 cybersecurity Jobs found

Cyber Governance, Risk & Compliance (GRC) Principal Consultant

System Analyst

Digital and Service Offering Manager, APM

Corporate Risk Analyst

WhiteCrow
WhiteCrow is on a mission to connect companies with the best talent across the globe.

EMPLOYER

TALENT

COMPANY

Contact Us

JOBS BY SKILLS

JOBS BY FUNCTION

JOBS BY INDUSTRY

JOBS BY LOCATIONS

MODEL JOBS

JOBS BY CITY

Skills

Industry

Location

Jobtitle

4 cybersecurity Jobs found

Cyber Governance, Risk & Compliance (GRC) Principal Consultant

System Analyst

Digital and Service Offering Manager, APM

Corporate Risk Analyst

WhiteCrow WhiteCrow is on a mission to connect companies with the best talent across the globe.

EMPLOYER

TALENT

COMPANY

Contact Us

JOBS BY SKILLS

JOBS BY FUNCTION

JOBS BY INDUSTRY

JOBS BY LOCATIONS

MODEL JOBS

JOBS BY CITY

WhiteCrow
WhiteCrow is on a mission to connect companies with the best talent across the globe.