{"id":103253,"url":"https://alion.io/job/careersgov-grc-application-security-specialist-contract","title":"GRC Application Security Specialist (Contract)","company":{"id":178377,"name":"Careers@Gov","domain":"careers.gov.sg","url":"https://alion.io/company/careersgov","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":236,"ghost_share":0,"stale_share":0.292,"repost_share":0.102,"time_to_fill_p50_days":28,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":113000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":44},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"OWASP Top 10","optional":false}],"status":"live","first_seen_at":"2026-08-17T00:00:00Z","employer_posted_date":"2026-11-01","last_verified_at":"2026-11-02T23:07:28Z","board_verified":true,"closed_at":null,"days_open":78,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":77},"description":"[What the role is]\nAs a Governance Risk and Compliance Specialist & Application Security Engineer, this role is crucial in developing and maintaining a robust culture of technology and cybersecurity risk governance across our organization.[What you will be working on]\nGovernance, Risk and Compliance (GRC)\nDevelop and promote a culture of technology risk governance and management across the organisation, ensuring proper accountability in managing, tracking, and reporting technology and cyber risks\nProvide subject matter expertise to internal stakeholders on cybersecurity requirements, including compliance with MAS internal policies and standards, as well as policies from GovTech and Cyber Security Agency of Singapore\nReview and establish ICT policies and process controls, conducting regular compliance checks to ensure adherence\nTrack and monitor technology projects and initiatives to meet compliance requirements, including Key Risk Indicators and Control Self-Assessment as part of the technology governance framework\nMonitor incident reporting processes, reviewing and reporting on corrective measures and improvement areas\nParticipate in consultations and conduct gap analysis against new or revised regulatory requirements\nAssess and seek waiver approvals for deviations and develop risk treatment strategies\nOrganise risk forums and monitor action plans, coordinate and facilitate IT and cybersecurity audits\nTrack remediation plans to address audit findings and follow up on remediation actions with stakeholders, project managers, and application managers\nApplication Security\nEstablish clear guidelines and best practices for secure coding, vulnerability management, and incident response across development teams\nServe as Subject Matter Expert in application security for enterprise projects during development phases, providing information security consulting and recommendations\nDiscover security vulnerabilities and devise mitigation strategies, reporting and resolving technical debt effectively\nTrack and address security issues with timely remediation and patching processes\nIntegrate security tools and processes into DevOps pipelines, automating security scans and tests\nCollaborate with developers and software teams to ensure security integration at every stage of software development\nWork with development teams to remediate application security vulnerabilities and prevent future incidents\nImplement and promote secure coding practices throughout the organisation\nStrategic and Operational Excellence\nRecommend re-engineering and streamlining of processes to enhance control effectiveness\nPresent management reporting to stakeholders with data analysis, trend identification, and strategic recommendations\nEnhance training materials and documentation in ICT risk management, developing case studies and best practices\nStay updated on latest security threats, trends, and emerging technologies\nIdentify opportunities for incorporating AI assistant tools into development processes and analyse efficacy of potential use cases\nThis integrated role ensures comprehensive security coverage from governance oversight through to technical implementation, creating a robust security posture across the organisation's technology landscape.\n[What we are looking for]\nAt least 5 years relevant experience in ICT cybersecurity, data security, audit management, governance, risk and compliance management, security engineer or security architect role\nRelevant certifications in IT governance, IT audit, cyber or data security (e.g. CISSP, CISM, CISA, etc.) preferred.\nAbility to work with cross-functional, multi-disciplined team to operationalise monitor security policies and procedures.\nKnowledge of Instruction Manual 8 and CSA Cybersecurity Code of Practice preferred.\nTechnical knowledge of security vulnerabilities, validation of remediations and risk assessments.\nExperience in performing penetration testing, secure code review, static, dynamic and manual source code review.\nExperience in identifying and remediating common web application vulnerabilities such as OWASP Top 10\nHands-on experience with Web Application Scanning Tools\nProven experience in secure coding practices, vulnerability assessment, and penetration testing\nRelevant experience in data visualisation and analytics.\nSkillset:\nStrong analytical, reasoning and problem-solving skills. \nMeticulous with an eye for detail.\nGood oral and written communication skills\nAbility to work independently and assume responsibility for project deliverables.\nTeam player who is proactive and collaborative \nExperience in reporting and dashboard using JIRA is preferred.\nAs part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.\nThis is a 2-Year Contract. All applicants will be notified on whether they are shortlisted or not within 4 weeks of the closing date of this job posting.","description_format":"text","description_chars":4949,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Digital Government","Information Security","Job Boards & Aggregators"],"lifecycle":[{"event":"open","at":"2026-08-17T00:00:00Z"},{"event":"close","at":"2026-08-31T02:32:41Z"},{"event":"reopen","at":"2026-08-31T05:32:42Z"},{"event":"close","at":"2026-09-14T16:15:24Z"},{"event":"reopen","at":"2026-09-15T04:23:36Z"},{"event":"close","at":"2026-10-31T20:18:34Z"},{"event":"reopen","at":"2026-11-01T15:33:41Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.606,"p_room":0.28,"age_days":77,"expected_fill_days":28,"reasons":["conf:9","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/careersgov-grc-application-security-specialist-contract","json_url":"https://alion.io/job/careersgov-grc-application-security-specialist-contract.json","meta":{"generated_at":"2026-11-03T01:17:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1611,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":178377},"rest":"https://alion.io/mcp/rest/get_company?id=178377"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcareersgov-grc-application-security-specialist-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcareersgov-grc-application-security-specialist-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcareersgov-grc-application-security-specialist-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/careersgov-grc-application-security-specialist-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcareersgov-grc-application-security-specialist-contract"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":103253}},{"tool":"search_jobs","arguments":{"company":"careers.gov.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":103253},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}