Client: Global Insurance Company

Location: Singapore

Engagement Type: Contract – maternity cover

Contract Duration: 6–7 months

Target Start Date: Immediate, preferably by end November 2026

Experience Required: Approximately 8 years of relevant experience

Our client, a global insurance company, is seeking an experienced Senior Security Consultant specialising in Information Risk Management and Governance, Risk & Compliance (GRC) to provide temporary coverage for a team member on maternity leave.

The consultant will support information security governance, regulatory compliance, technology risk and cyber risk management within a regulated financial services environment.

Key Responsibilities

• Regulatory Compliance: Conduct regulatory compliance reviews and gap analyses against MAS Technology Risk Management (TRM) Guidelines and other applicable regulatory requirements, supporting regulatory engagements, inspections and follow-up actions
• Technology & Cyber Risk Management: Perform information security, technology and cyber risk assessments, identify control gaps, evaluate residual risks and monitor remediation plans through to closure
• Audit & SOX Coordination: Coordinate internal and external audit reviews, manage evidence requests, engage with auditors and control owners, support SOX audit activities and track remediation actions
• Cybersecurity Governance: Maintain risk and control frameworks, governance standards, management information and committee reporting
• Threat Intelligence: Manage Financial Sector Threat Intelligence (FINTEL) advisories, assess their applicability, coordinate control validation and track required actions
• Security Incident Management: Coordinate incident response from a risk and governance perspective, including escalation, impact assessment, stakeholder coordination, lessons learned and applicable regulatory reporting
• Risk & Control Self-Assessment (RCSA): Facilitate RCSAs, challenge risk and control assessments and advise business and technology stakeholders on risk and compliance matters
• Management Reporting: Prepare risk reports, dashboards, governance papers and remediation updates for senior management and relevant committees

Required Experience & Qualifications

• Approximately 8 years of experience in information risk management, technology risk, cybersecurity governance, regulatory compliance, IT audit or GRC
• Proven experience within insurance, banking, asset management or another regulated financial services organisation
• Strong working knowledge of MAS TRM Guidelines and Singapore financial-sector regulatory requirements
• Hands-on experience managing regulatory reviews, audit engagements, control gap assessments and remediation tracking
• Experience supporting SOX audit activities and control testing
• Knowledge of cybersecurity governance, incident management, FINTEL advisories and RCSA processes
• Strong stakeholder management, analytical, written communication and reporting skills
• A relevant degree in Information Systems, Cybersecurity, Computer Science or a related discipline
• CISA, CRISC, CISSP, CISM or equivalent professional certifications are preferred