Senior Security Consultant (Information Risk Management & GRC)

Senior Security Consultant – Information Risk Management & GRC (12-Month Contract)

Location: Singapore |

Contract: 12 months

Our client, a regulated financial services organisation in Singapore, is looking for an experienced Senior Security Consultant to join on a 12-month contract. You’ll lead and support information security governance, regulatory compliance, and technology and cyber risk activities, working with stakeholders across the business, technology, cybersecurity, audit, compliance and senior management.

What you’ll be doing

• Conducting compliance reviews and gap analyses against the MAS Technology Risk Management (TRM) Guidelines, and supporting regulatory engagements, inspections and information requests
• Performing information security, technology and cyber risk assessments, identifying control gaps and tracking remediation through to closure
• Coordinating Internal and External Audit reviews, from planning and evidence collation to response management
• Supporting SOX audit activities, including control-owner engagement and evidence requests
• Overseeing cybersecurity governance, including risk and control frameworks and committee reporting
• Managing FINTEL advisories and threat intelligence assessments
• Coordinating security incident response from a risk and governance perspective, including regulatory reporting
• Facilitating RCSAs and providing practical risk and compliance advice
• Preparing risk reports, dashboards and decision papers for senior management and governance committees

What you’ll bring

• Around 8 years’ experience in information risk management, technology risk, cybersecurity governance, regulatory compliance, audit or GRC
• Background in banking, insurance, asset management or another regulated financial services environment
• Practical knowledge of MAS TRM Guidelines, ideally with experience of Singapore financial-sector regulatory requirements
• Experience managing regulatory inspections, audit reviews and closure of findings
• Exposure to SOX control testing or technology-related SOX audits
• Strong stakeholder management and written communication skills, with the confidence to engage senior management, auditors and regulators
• Degree in Information Systems, Cybersecurity, Computer Science or a related field
• CISA, CRISC, CISSP, CISM or an equivalent certification is preferred