FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Cybersecurity Engineer, GRC Manager
Assurity Trusted Solutions Pte Ltd. Act as the de facto lead for GRC across managed products and platforms.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in ICT Governance, Risk Management, and Compliance (GRC) with a strong focus on security controls, policy development, and stakeholder engagement. Proven ability to lead audits, manage risks, and implement effective security practices in a regulated environment.
Highest-signal resume keywords
Cybersecurity ExperienceICT GovernancePolicy Writing SkillsStakeholder ManagementRisk Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
ICT Risk ControlsSecurity Plan AssessmentAudit ManagementSDLC UnderstandingAgile DeliveryCloud/SaaS SecurityPhishing Simulation DesignEvidence ValidationControl DesignKPI Tracking
Soft Skills
Influencing SkillsNegotiation SkillsStakeholder EngagementChange LeadershipCommunication Skills
Tools & Technologies
Enterprise Issue-Tracking PlatformsCollaboration ToolsAutomation ToolsAI-Enabled ToolsDocumentation Spaces
Industry Keywords
Regulated EnvironmentPublic SectorGovernanceComplianceSecurity Policies
Tech Stack
Tools & technologiesCloudCyber SecuritySDLC
About the role
Key responsibilities & impact- Act as the de facto lead for GRC across managed products and platforms.
- Operate as 2nd line of defence for ICT risk and controls, providing independent challenge on risk, control design, and effectiveness.
- Partner with Product teams to embed pragmatic security and compliance into delivery.
- Own governance and standards for Security Plan submissions, including templates, evidence expectations, and quality benchmarks.
- Review Security Plans and supporting evidence, assess control coverage and maturity, and recommend approvals to stakeholders.
- Collaborate with product and platform teams to define evidence checked automatically and drive remediation of gaps, anomalies, and missing evidence.
- Track and report Security Plan KPIs across CIOO and Product teams.
- Design, implement, and own workflows for ICT audit, risk, and findings management.
- Maintain knowledge and documentation spaces for audit plans, control descriptions, evidence templates, audit evidence, and Security Plan artefacts.
- Plan and execute thematic and product-level ICT audits under the CISO’s direction.
- Coordinate with internal audit on ICT/security engagements, facilitate evidence collection, and track finding closure.
- Provide management reporting on audit status, key risks, and trends to CIOO leadership and the CISO.
- Author and maintain GovTech-wide security and technology policies covering sandbox usage, AI coding practices, and SaaS usage and clearance.
- Own the policy lifecycle from drafting and consultation through approval, publication, and review.
- Translate policies into practical guidance for Product teams and monitor adoption and non-compliance.
- Lead Security Education, Training and Awareness for GovTech HQ, including phishing simulations, newsletters, and brown-bag sessions or clinics.
- Define and track SeTA KPIs and refine content based on insights.
- Champion new audit and GRC practices using issue-tracking, collaboration tools, automated controls, and analytics.
- Influence and negotiate with senior stakeholders to adopt new practices.
- Provide actionable recommendations to the CISO and CIOO leadership on risk, remediation priorities, and structural improvements.
Requirements
What you’ll need- At least 5 years of experience in Cybersecurity, preferably in a regulated or public-sector environment.
- Strong understanding of ICT governance and security controls across applications, infrastructure, and SaaS.
- Understanding of product team workflows, including SDLC, agile delivery, and cloud/SaaS usage, and where to embed controls without blocking delivery.
- Comfortable acting as 2nd line of defence, providing independent challenge, validating evidence, and working constructively with 1st line teams and 3rd line internal audit.
- Practical experience with enterprise issue-tracking and collaboration platforms, including designing or maintaining workflows, issue types, dashboards, and documentation spaces for audit, risk, or compliance.
- Strong policy writing skills, including drafting clear policies and standards and translating them into playbooks, checklists, and working-level guidance.
- Experience designing or running phishing simulations and producing newsletters or communications.
- Comfortable working with automation and AI-enabled tools, such as enterprise search platforms, to scale GRC and audit work.
- Excellent stakeholder management, influencing, and negotiation skills, with a track record of leading change, challenging assumptions respectfully, and finding pragmatic, risk-aware compromises.
Benefits
Comp & perks- A wholly-owned subsidiary of GovTech.
- We promote a learning culture and encourage you to grow and learn.
- Contract Staff enjoys the same benefits as Permanent Employees.