{"id":4173498,"url":"https://alion.io/job/assurity-trusted-solutions-cybersecurity-engineer-grc-with-ai","title":"Cybersecurity Engineer (GRC with AI)","company":{"id":232832,"name":"Assurity Trusted Solutions","domain":"assurity.sg","url":"https://alion.io/company/assurity","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":92,"open_postings":34,"ghost_share":0,"stale_share":0.118,"repost_share":0,"time_to_fill_p50_days":94,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST CSF","optional":false}],"status":"live","first_seen_at":"2026-11-12T15:22:07Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T15:22:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade. ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, governance and assurance services as well as managed processes. In a dynamic digital & cyber landscape where trust & collaboration is key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.\nResponsibilities:\nDesign and operate AI-assisted automation for System Security Plan(SSP) review, evidence classification, control mapping, compliance monitoring and security-posture reporting. Define appropriate human review points and validate the reliability of automated outputs.\nWrite, review and maintain practical security policies, standards and implementation guidance. Policies must translate organisational intent into clear, technically meaningful and enforceable requirements that product and engineering teams can apply.\nOwn and improve the CISO Office’s governanceand compliance monitoring approach, including the definition of what good security control implementation looks like for products within scope.\nStrengthen SSP verification by translating broad or process-oriented clauses into specific, testable control statements and evidence expectations that product teams can understand and apply.\nCoordinate Information and Communications Technology (ICT) risk management activities, including risk identification, treatment tracking, escalation, acceptance and formal closure, with clear ownership and due dates.\nDevelop and maintain security posture reporting and the CISO dashboard, ensuring that reported status is supported by current evidence and highlights material gaps, trends and overdue actions.\nEstablish repeatable timelines and evidence requirements for audit follow-up, compliance reviews, lower-level checks and other governance activities arising from previous assessments.\nSupport the rollout and operationalisation of policies for AI-assisted coding, sensitive or high-impact data handling, software as a service (SaaS) usage, Model Context Protocol (MCP) integrations, logging and related emerging technology risks.\nWork with security and engineering teams to identify opportunities for compliance monitoring, workflow automation and agent-assisted evidence review while retaining human judgement for risk decisions and closure.\nCoordinate governance forums and working sessions with product teams and central stakeholders, ensuring decisions, actions, exceptions and dependencies are recorded and followed through.\nMaintain reusable governance guidance, control interpretations, evidence examples and lessons learned to improve consistency across future SSP and risk reviews.\nProvide concise, decision-ready advice to CISO leadership on systemic control gaps, resource constraints, residual risk and priorities for remediation.\nRequirements\nSecurity frameworks or standards such as ISO 27001, NIST CSF, NIST SP 800-53, CSA CCM or equivalent control frameworks.\nGovernance tooling, GRC platforms, evidence repositories, dashboards or workflow automation.\nCloud and software-as-a-service (SaaS) security controls, identity and access management, logging, data protection and software-development lifecycle practices.\nRelevant professional certifications such as CISSP, CISA, CRISC, ISO 27001 Lead Implementer or Lead Auditor. Certifications are useful but do not replace practical judgement.\nExperience\nTechnical security experience in cloud, application, infrastructure, platform, development, security and operations (DevSecOps), security architecture, security engineering or a closely related area, combined with experience in governance, risk or compliance.\nStrong understanding of how technical controls operate in practice, including identity and access management, logging and monitoring, vulnerability management, secure software delivery, cloud security and data protection.\nAbility to write clear, practical and enforceable control requirements, guidance and management papers for technical and non-technical stakeholders.\nExperience coordinating reviews across multiple products, platforms or business units, with the judgement to distinguish administrative completion from meaningful control effectiveness.\nComfort working directly with cloud, software as a service (SaaS), software delivery and artificial intelligence (AI)-related risks. Experience with System Security Plans, threat modelling, AI governance, development, security and operations (DevSecOps), or automated compliance monitoring is advantageous.\nStrong stakeholder-management, facilitation and written-communication skills, with the ability to challenge constructively and drive actions to closure.\nJoin us and discover a meaningful and exciting career with Assurity Trusted Solutions!\nThe remuneration package will commensurate with your qualifications and experience. Interested applicants, please click \"Apply Now\".\nWe thank you for your interest and please note that only shortlisted candidates will be notified.\nBy submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/ or such other successor site.\nBenefits\nA wholly-owned subsidiary of GovTech.\nWe promote a learning culture and encourage you to grow and learn.\nContract Staff enjoys the same benefits as Permanent Employees.","description_format":"text","description_chars":5728,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-12T15:22:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":94,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T16:59:23Z"},"pay":null,"html_url":"https://alion.io/job/assurity-trusted-solutions-cybersecurity-engineer-grc-with-ai","json_url":"https://alion.io/job/assurity-trusted-solutions-cybersecurity-engineer-grc-with-ai.json","meta":{"generated_at":"2026-11-12T16:59:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35640,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":232832},"rest":"https://alion.io/mcp/rest/get_company?id=232832"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-grc-with-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-grc-with-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-grc-with-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/assurity-trusted-solutions-cybersecurity-engineer-grc-with-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-grc-with-ai"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4173498}},{"tool":"search_jobs","arguments":{"company":"assurity.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4173498},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}