About this Role

This role works closely with the Deputy Director of Information Security in managing the information security governance, compliance, and security operations across global SaaS and cloud environments. The position is a hands-on, hybrid security role covering both Governance, Risk & Compliance (GRC), and security operations (SecOps). The candidate is expected to possess sufficient technical security understanding to interpret security events and risks, evaluate security solutions, coordinate incident response and remediation.

Key Responsibilities

• Maintain the organization’s ISO 27001 ISMS, including policies, procedures, risk register, audit readiness.
• Coordinate internal and external audits (e.g., ISO 27001, SOC2, OSPAR), vendor penetration testing, including preparation and follow ups on remediation of findings.
• Act as Singapore ISMS Management Repre...