Cyber GRC Engineer (Cloud-AWS)

About the role

A fast-growing technology organisation delivering digital transformation, cloud and technology solutions to enterprise customers is hiring a Cyber GRC Engineer (Cloud-AWS) in Singapore. The role blends hands-on security work with strategic risk management, driving cloud governance and cybersecurity initiatives.

Key responsibilities

• Develop and enhance cybersecurity governance frameworks, policies and standards across cloud environments.
• Lead cloud risk assessments, control reviews and compliance initiatives aligned to recognised industry frameworks.
• Partner with engineering and DevOps teams to embed security controls into cloud infrastructure and deployment pipelines.
• Oversee cloud security monitoring, incident governance and remediation activities.
• Support internal and external audits through control documentation, evidence collection and stakeholder engagement.
• Evaluate third-party and vendor security risks against organisational and regulatory requirements.
• Provide security leadership, mentoring and guidance on cloud security best practices, risk management and governance.

Required profile

• More than 6 years of cybersecurity experience, with strong exposure to cloud security and governance.
• Experience securing cloud platforms such as AWS, Azure and/or GCP.
• Strong understanding of frameworks such as ISO 27001, NIST CSF, SOC 2 or similar.
• Hands-on experience with risk assessments, audit support and compliance management.
• Familiarity with cloud technologies, Infrastructure-as-Code, CI/CD security and container platforms.
• Strong stakeholder management skills and the ability to explain technical risks to business leaders.
• Certifications such as CISSP, CISM, CCSP, AWS Security or Azure Security are advantageous.

What we offer

• The chance to influence cybersecurity strategy and cloud governance at an enterprise level.
• Exposure to modern cloud technologies and large-scale transformation initiatives.
• Structured training and certification sponsorship.
• A collaborative, security-focused culture with strong leadership support.
• Competitive remuneration with performance-based incentives.
• Clear career progression into senior cybersecurity leadership positions.