IT Consultant – Compliance & Risk Management

About the role

The Singapore Institute of Technology is seeking an experienced IT Consultant to lead its IT Governance, Risk & Compliance (GRC) initiatives within the Communications & Information Technology Division. You will develop, implement and monitor frameworks, policies and processes to ensure alignment with regulatory requirements and strategic goals.

Key responsibilities

• Drive organisational awareness and engagement for IT GRC objectives.
• Manage and coordinate IT audits, gathering information and reviewing submissions.
• Maintain up‑to‑date IT policies, procedures and controls, documenting them with stakeholders.
• Develop, maintain and report on the IT Risk Register.
• Perform internal control testing and schedule periodic risk self‑assessments.
• Support initiatives to assess the adequacy of IT controls and oversee remediation.
• Coordinate quarterly IT Disaster Recovery exercises and follow‑up actions.
• Consolidate IT incidents, conduct root‑cause analysis and implement remediation measures.

Required profile

• Degree in Information Technology, Computer Science or related discipline.
• Minimum 8 years of experience in IT governance, audits and risk management.
• Proven experience with ISO 27001 and CTM compliance; certification experience highly desirable.

Required skills

• Strong knowledge of ISO 27001:2022 standards.
• Familiarity with Cybersecurity Trustmark framework.
• Understanding of Singapore’s Personal Data Protection Act (PDPA).
• Experience with Low‑Code/No‑Code platform governance.