search Browse Jobs
GRC, Senior Security ConsultantGTS Consulting · Singapore
GTS Consulting logo

GTS Consulting

company page ↗

GRC, Senior Security Consultant

🗓️ Posted 2026-09-11 Singapore Full-time Hybrid ICT
💰 Salary Not shared 📊 Market S$7,000–S$12,000/mo

About the Company

We are seeking an experienced Cybersecurity Consultant specialising in Governance, Risk and Compliance (GRC) to support the delivery of ISO/IEC 27001, CSA Cyber Essentials Mark (CEM), CSA Cyber Trust Mark (CTM), Data Protection Trustmark (DPTM)/ SS 714, Threat and Risk Assessment (TRA), and regulatory compliance engagements. Reporting to the GRC Lead, you will work with clients to strengthen their cybersecurity governance, prepare for audits and certifications, meet regulatory requirements, and develop sustainable security capabilities. You will collaborate closely with clients' management and IT teams, as well as Stone Cybersecurity's penetration testing, Security Operations Centre (SOC), cloud security, and security architecture teams.

Responsibilities

  • ● GRC and Regulatory Compliance
  • ● Support and deliver readiness, implementation, and certification engagements for
  • ● Conduct compliance gap assessments and cybersecurity maturity evaluations against
  • ● Develop audit-ready Information Security Management System (ISMS) documentation,
  • ● Support clients during internal audits, external certification audits, and regulatory
  • ● Track audit and assessment findings and work with client stakeholders to support the
  • ● Threat and Risk Assessments and Cyber Exercises
  • ● Conduct cybersecurity Threat and Risk Assessments for cloud, enterprise, and regulated
  • ● Identify critical assets, threats, vulnerabilities, business impacts, and cybersecurity risks,
  • ● Produce clear and comprehensive assessment reports aligned with applicable CSA, NIST,
  • ● Design, facilitate, and document tabletop exercises, incident response simulations, and
  • ● Assess clients' incident response preparedness and recommend improvements to their
  • ● Security Governance and Advisory
  • ● Develop and enhance cybersecurity policies, incident response plans, governance
  • ● Review enterprise systems, cloud environments, and business processes from a
  • ● Assess security areas such as identity and access management, logging and monitoring,
  • ● Provide practical, risk-based recommendations that balance cybersecurity, regulatory
  • ● Deliver cybersecurity awareness briefings and support clients' wider security governance
  • ● Project Delivery and Stakeholder Engagement
  • ● Manage assigned project activities and workstreams under the direction of the GRC Lead.
  • ● Support the management of project timelines, deliverables, risks, dependencies, and
  • ● Collaborate with penetration testing, SOC, cloud security, and security architecture teams
  • ● Prepare and present assessment findings, risk positions, and recommendations to client
  • ● Escalate material risks, project issues, delays, and compliance concerns to the GRC Lead
  • ● Provide regular progress updates and contribute to the successful delivery and closure of
  • ● Technical Skillset and Competency
  • ● Relevant certifications such as ISO 27001/27701 LA/LI, CISSP, CISA, CISM, CRISC,
  • ● Proven experience in GRC, cybersecurity consulting, or risk management.
  • ● Hands-on experience implementing ISO/IEC 27001 and/ or 27701.
  • ● Strong understanding of Risk Management framework and Methodology
  • ● Excellent stakeholder engagement, communication, and presentation skills
  • ● Outspoken personality and advanced interpersonal skills