IT Governance, Risk & Compliance (GRC), Senior Specialist - 1 Year Contract

Job Summary You will be deployed to our client who is a leading government technology agency driving digital transformation and innovation in the healthcare sector. Seeking a Senior GRC Specialist responsible for ensuring compliance with IM8 policies, managing IT risks and controls, and coordinating audit readiness and remediation across the organisation. Responsibilities • Serve as the key point of contact for IT governance, risk and compliance (GRC) matters, engaging with internal stakeholders to drive effective risk and compliance management. • Coordinate risk assessments, review risk treatment plans, track remediation progress and ensure compliance with established governance frameworks and requirements. • Support internal and external IT audits and reviews, including coordinating assessments, validating findings and monitoring remediation efforts. • Conduct periodic compliance and control assessments across IT applications to evaluate adherence to relevant policies, regulatory requirements and security standards. • Perform cybersecurity and IT control testing to assess control design and operating effectiveness, identifying gaps and recommending improvements. • Identify opportunities to strengthen and standardise internal controls, governance processes and compliance practices. • Develop and maintain management reports, risk metrics and dashboards to provide visibility into the organisation's risk and compliance posture. • Provide actionable risk insights and recommendations to management to support informed decision-making and risk mitigation. • Prepare and present GRC updates and reports to senior management and relevant stakeholders. • Coordinate governance forums, risk committees and periodic stakeholder meetings. Requirements • Bachelor's Degree in Computer Science, Information Technology, Cybersecurity or a related discipline. • At least 5 years of relevant experience in Cybersecurity Governance, Risk & Compliance (GRC), IT Risk Management, Information Security or IT Audit. • Strong expertise in Governance, Risk & Compliance (GRC), with mandatory hands-on experience in Singapore Government Instruction Manual 8 (IM8) policies and requirements. • Proven experience in ensuring organisational compliance with IM8 policies, including interpreting policy requirements, conducting compliance assessments and implementing necessary controls. • Strong expertise in IT controls and IT risk management, including control assessments, control effectiveness testing, risk identification, evaluation and mitigation. • Proven experience in audit preparation and coordination, including supporting internal and external audits, addressing audit findings and driving remediation activities. • Good knowledge of cybersecurity governance, information security standards and frameworks such as ISO 27001, COBIT, PCI DSS and OWASP. • Experience in developing risk assessments, control frameworks, compliance reports and risk remediation plans. • Strong analytical, critical thinking and problem-solving skills, with the ability to identify control gaps and recommend improvements.Excellent verbal and written communication skills, with the ability to engage stakeholders and present complex risk and compliance matters clearly. • Proficient in Microsoft Office applications, particularly Excel, PowerPoint, Word and SharePoint.Experience in the healthcare or public sector would be advantageous. • Professional certifications such as CISA, CISSP, CISM, CRISC or CGEIT would be an added advantage If you are interested in this role and would like to discuss the opportunity further please click apply now or email Chew Kai-Xinn at kaixinnchew@morganmckinley.com for more information. Only shortlisted candidates will be responded to, therefore if you do not receive a reply within 14 days please accept this as notification that you have not been shortlisted. Morgan McKinley Pte Ltd Chew Kai-Xinn EA Licence No: 11C5502 EAP Registration No: R2196712