[Hiring] Information Security Governance, Risk and Compliance Specialist @NTT Ltd.

Role Description

The Information Security Governance, Risk and Compliance (GRC) Specialist is a seasoned subject matter expert, responsible for supporting the organization's information security program by:

• Assessing risks
• Implementing security controls
• Ensuring compliance
• Managing security awareness initiatives
• Contributing to policy development

This role collaborates with internal teams to enhance security practices and maintain a strong security posture.

Key Responsibilities:

• Implement and maintain security compliance frameworks (e.g., Data Protection Trustmark, Cyber Trust Mark, ISO/IEC 27001, GDPR, PDPA) in accordance with company policies
• Monitor adherence to internal security policies and procedures
• Collaborate with internal stakeholders to ensure compliance with industry standards and regulations
• Conduct regular audits and assessments to identify gaps and recommend corrective actions
• Review client contracts and vendor agreements to ensure cybersecurity and risk-related clauses are appropriately addressed
• Participate in security awareness and training initiatives
• Support incident response activities and investigations as required
• Ensure timely reporting of security incidents to regulators and clients as required
• Monitor and report on security compliance metrics
• Assist in the implementation of security controls and best practices
• Stay updated with emerging security threats and trends
• Perform any other related task as required

Qualifications

• Seasoned familiarity with information security frameworks and standards in Singapore
• Seasoned understanding of risk assessment methodologies, compliance, and policy development
• Strong communication and interpersonal skills for effective collaboration
• Strong attention to detail and ability to follow established processes
• Seasoned project management skills for coordinating and implementing security initiatives

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science, Information Security, Risk Management or related field
• Prior experience in regulated industries (e.g. financial services, technology, healthcare, telecommunications) is highly desirable
• Seasoned experience (5 to 8 years) in information security or related roles
• Seasoned exposure to risk assessment, compliance, security awareness, or policy development is beneficial

Benefits

• Remote Working