Senior Security Consultant
Job Description
Client: Global Insurance Company
Location: Singapore
Engagement Type: Contract – maternity cover
Contract Duration: 6–7 months
Target Start Date: Immediate, preferably by end November 2026
Experience Required: Approximately 8 years of relevant experience
Our client, a global insurance company, is seeking an experienced Senior Security Consultant specialising in Information Risk Management and Governance, Risk & Compliance (GRC) to provide temporary coverage for a team member on maternity leave.
The consultant will support information security governance, regulatory compliance, technology risk and cyber risk management within a regulated financial services environment.
Key Responsibilities
- Regulatory Compliance: Conduct regulatory compliance reviews and gap analyses against MAS Technology Risk Management (TRM) Guidelines and other applicable regulatory requirements, supporting regulatory engagements, inspections and follow-up actions
- Technology & Cyber Risk Management: Perform information security, technology and cyber risk assessments, identify control gaps, evaluate residual risks and monitor remediation plans through to closure
- Audit & SOX Coordination: Coordinate internal and external audit reviews, manage evidence requests, engage with auditors and control owners, support SOX audit activities and track remediation actions
- Cybersecurity Governance: Maintain risk and control frameworks, governance standards, management information and committee reporting
- Threat Intelligence: Manage Financial Sector Threat Intelligence (FINTEL) advisories, assess their applicability, coordinate control validation and track required actions
- Security Incident Management: Coordinate incident response from a risk and governance perspective, including escalation, impact assessment, stakeholder coordination, lessons learned and applicable regulatory reporting
- Risk & Control Self-Assessment (RCSA): Facilitate RCSAs, challenge risk and control assessments and advise business and technology stakeholders on risk and compliance matters
- Management Reporting: Prepare risk reports, dashboards, governance papers and remediation updates for senior management and relevant committees
Required Experience & Qualifications
- Approximately 8 years of experience in information risk management, technology risk, cybersecurity governance, regulatory compliance, IT audit or GRC
- Proven experience within insurance, banking, asset management or another regulated financial services organisation
- Strong working knowledge of MAS TRM Guidelines and Singapore financial-sector regulatory requirements
- Hands-on experience managing regulatory reviews, audit engagements, control gap assessments and remediation tracking
- Experience supporting SOX audit activities and control testing
- Knowledge of cybersecurity governance, incident management, FINTEL advisories and RCSA processes
- Strong stakeholder management, analytical, written communication and reporting skills
- A relevant degree in Information Systems, Cybersecurity, Computer Science or a related discipline
- CISA, CRISC, CISSP, CISM or equivalent professional certifications are preferred
More Info
Key Skills
Security Incident Management
Cybersecurity Governance
Technology Risk Management (TRM)
MAS TRM Guidelines
Audit SOX Coordination
About Company
Skills:
threat modeling , security plus , Web Security, Security Compliance, Networking, Docker, Penetration Testing, Cism, Aws Services, Systems Administration, Devops, Cloud Architecture, Applications Development, Kubernetes, GIAC Certified Incident Handler, containers ecosystem, Cissp, gcih, risk management, Cisa, GSEC, infrastructure troubleshooting, GIAC Security Essentials, cloud computing technologies
Skills:
solution implementation , threat modeling , security plus , Networking, Web Security, Cism, Penetration Testing, Cloud Architecture, Devops, Applications Development, Systems Administration, Aws Services, Security Compliance, Kubernetes, Docker, risk management, Cissp, GSEC, GIAC Certified Incident Handler, cloud computing technologies, containers ecosystem, project management, cloud infrastructure technologies, Security Essentials, infrastructure troubleshooting, Cisa, gcih
Skills:
telemetry , Soc, Cybersecurity, Cyber Incident Management, Threat Analysis, Infrastructure Management, Threat Intelligence, Information Technology, Emergency and Security Communication Systems Maintenance, Cybersecurity Engineering, Computer Science, Unified Threat Management, risk management support, Investigation, Internal negotiations, Security Monitoring