Editorial summary

The company is seeking a Cybersecurity Governance, Risk and Compliance (GRC) Lead for a permanent role in the Central Area. The position responsibilities include developing and maintaining cybersecurity policies, standards, and procedures aligned with business objectives, regulatory requirements, and industry best practices, and leading the Security Governance and Assurance team to drive process improvements and automation. Key requirements encompass conducting cybersecurity risk assessments, reviewing security exceptions, and ensuring governance and assurance functions meet regulatory standards. Compensation includes up to $15,000 monthly plus an attractive bonus and benefits.

This summary is AI-generated and may contain inaccuracies. Please refer to the full job description below.

Job description

[This job https://singapore.job-q.com/jobs/detail/cybersecurity-governance-risk-and-compliance-grc-lead-up-to-15-000-attractive-bonus-central-permanent-role-41884 first appeared in Job-Q.com on 07 Nov 2026]

Cybersecurity Governance, Risk and Compliance (GRC) Lead (up to $15,000/ Attractive Bonus/ Central/ Permanent Role)

• Location: Central Area
• Salary: up to $15,000 + Attractive Bonus & Benefits
• Permanent Role

Responsibility:

• Develop, implement, and maintain cybersecurity policies, standards, and procedures in line with business objectives, regulatory requirements, and industry best practices.
• Lead the Security Governance and Assurance team and drive continuous improvements in cybersecurity processes, efficiency, and automation.
• Conduct cybersecurity risk assessments, review security exceptions and risk acceptance requests, and recommend appropriate mitigation measures.
• Oversee cybersecurity vulnerabilities, security control gaps, and remediation efforts across IT systems, applications, and infrastructure.
• Monitor regulatory developments and ensure compliance with applicable cybersecurity regulations, MAS Notices, and industry standards.
• Oversee security assurance activities, including Vulnerability Assessment and Penetration Testing (VAPT), red-team exercises, and tabletop exercises.
• Coordinate internal and external IT security audits and ensure timely and effective remediation of audit findings.
• Develop and monitor cybersecurity metrics and Key Risk Indicators (KRIs), providing regular reports on security risks and control effectiveness to senior management and risk committees.
• Collaborate with the CISO, business units, and technology teams to strengthen cybersecurity governance and align security initiatives with business objectives.

Requirement:

• Bachelor’s Degree in computer science/ Cybersecurity/ Information Security or related certifications.
• Minimum of 10 years of experience in IT governance, cybersecurity risk management, or compliance, preferably in financial services or the payments industry.
• Must have relevant experience in the financial services industry, with strong knowledge of MAS Technology Risk Management (TRM) Guidelines and the ability to engage confidently with MAS and other regulatory stakeholders.
• Proven experience in managing key technology and cybersecurity risks, strengthening security policies and control frameworks, protecting Critical Information Infrastructure (CII), and overseeing audit compliance and Cybersecurity Code of Practice (CCoP) requirements.
• Experience in assessing emerging technology risks, particularly Artificial Intelligence (AI) and quantum computing, would be a strong advantage.
• Prior hands-on experience in cybersecurity, IT infrastructure, or technology risk management is highly desirable, although the role primarily focuses on governance, risk, compliance, and assurance.
• Relevant professional certifications such as CISA, CISM, CRISC, CISSP, other ISC2 certifications, or recognised cybersecurity Governance, Risk and Compliance (GRC) qualifications are preferred.

How to apply

Interested candidates who wish to apply for the post, you may click the Apply Now Button or send in your updated resume (in MS Word format) to

We regret to inform that only shortlisted candidates will be notified.

Careerally Pte Ltd | EA Licence: 24C2215
Ooi Chuan Yi (Jacky)| EA Registration No: R24122948

Scam prevention reminder: You should not make any pre-payment when applying for any job.

Illegal practices reminder: It is illegal for recruiter to collect payment (kickback) from the worker https://www.mom.gov.sg/-/media/mom/documents/publications/foreign-workers/what-are-kickbacks.pdf