Cybersecurity Governance, Risk & Compliance (GRC) Analyst

Department: CISO Office Location: Singapore Experience: 6+ years preferred Role Overview We are seeking a Cybersecurity GRC Analyst to strengthen our cybersecurity governance, risk management and regulatory compliance capabilities. Operating as the Second Line of Defence, the role provides independent oversight and assurance of cybersecurity risks, regulatory compliance and security controls across our telecommunications infrastructure and corporate systems. The successful candidate will work closely with cybersecurity, engineering and business teams to assess risks, challenge control effectiveness, monitor regulatory compliance and drive continuous security improvements.

Key

Cyber Risk Management: Maintain the cybersecurity risk register, independently review and challenge risk assessments, monitor risk treatment plans and coordinate risk acceptance and approval workflows. Risk Reporting: Monitor cybersecurity risk indicators and prepare risk reports, dashboards and recommendations for senior management, risk committees and the Board. Regulatory Compliance: Oversee compliance with applicable IMDA Telecommunications Cybersecurity Code (TCS) requirements, CSA Cybersecurity Code of Practice (CCoP) and other relevant regulations, including regulatory obligation mapping, compliance assessments and gap tracking.

Security Governance: Develop, review and maintain cybersecurity policies, standards and procedures, including the management of policy exceptions and devi