{"id":3505281,"url":"https://alion.io/job/simba-telecom-cybersecurity-governance-risk-compliance-grc-analyst","title":"Cybersecurity Governance, Risk & Compliance (GRC) Analyst","company":{"id":49915,"name":"Simba Telecom","domain":"simba.sg","url":"https://alion.io/company/simba-telecom","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":7000,"max":10000,"currency":"SGD","period":"month","gross":true,"usd_annual":93744},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-30T00:00:00Z","board_verified":false,"closed_at":null,"days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"Department: CISO Office\nLocation: Singapore\nExperience: 6+ years preferred\nRole Overview\nWe are seeking a Cybersecurity GRC Analyst to strengthen our cybersecurity governance, risk management and regulatory compliance capabilities. Operating as the Second Line of Defence, the role provides independent oversight and assurance of cybersecurity risks, regulatory compliance and security controls across our telecommunications infrastructure and corporate systems.\nThe successful candidate will work closely with cybersecurity, engineering and business teams to assess risks, challenge control effectiveness, monitor regulatory compliance and drive continuous security improvements.\nKey Responsibilities\nCyber Risk Management: Maintain the cybersecurity risk register, independently review and challenge risk assessments, monitor risk treatment plans and coordinate risk acceptance and approval workflows.\nRisk Reporting: Monitor cybersecurity risk indicators and prepare risk reports, dashboards and recommendations for senior management, risk committees and the Board.\nRegulatory Compliance: Oversee compliance with applicable IMDA Telecommunications Cybersecurity Code (TCS) requirements, CSA Cybersecurity Code of Practice (CCoP) and other relevant regulations, including regulatory obligation mapping, compliance assessments and gap tracking.\nSecurity Governance: Develop, review and maintain cybersecurity policies, standards and procedures, including the management of policy exceptions and deviations.\nSecurity Assurance: Perform second-line assurance reviews, control assessments and compliance gap analyses against regulatory requirements and industry standards. Evaluate control effectiveness and recommend risk-based improvements.\nAudit Management: Coordinate internal and external cybersecurity audits and regulatory assessments. Facilitate evidence collection, maintain audit findings registers and monitor remediation through closure.\nStakeholder Engagement: Provide independent risk and compliance advisory to technical and business teams, challenge control weaknesses and promote accountability for cybersecurity risk management.\nRequired Skills & Experience\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems or a related discipline.\n6-10 years of experience in cybersecurity governance, risk management, compliance, security assurance or IT audit.\nExperience conducting cybersecurity risk assessments, managing risk registers, reviewing risk treatment plans and coordinating risk acceptance processes.\nKnowledge of cybersecurity governance frameworks and standards, including ISO/IEC 27001 and NIST Cybersecurity Framework.\nExperience in security policy development, compliance assessments, control assurance and cybersecurity audits.\nGood understanding of cybersecurity controls across enterprise IT, network infrastructure, applications and cloud environments.\nKnowledge of telecommunications technologies, including 4G/5G mobile networks, radio access networks (RAN), mobile core systems and associated cybersecurity risks, would be advantageous.\nFamiliarity with Singapore cybersecurity regulations, particularly IMDA TCS and CSA CCoP, is advantageous.\nStrong analytical, documentation, risk reporting and stakeholder management skills.\nRelevant certifications such as CISA, CRISC, CISM, CISSP or ISO/IEC 27001 Lead Auditor are advantageous.\nIdeal Candidate\nA proactive, hands-on cybersecurity GRC professional with strong analytical skills, sound risk judgement and the ability to provide independent oversight and challenge. Comfortable engaging technical teams and management, translating regulatory requirements into practical risk-based recommendations, and driving continuous improvement in cybersecurity governance and assurance.\nSkills\nInformation Security Policies, Security Governance, Risk Governance, Regulatory Compliance, Development, Risk and Compliance Management, Defense, Cybersecurity Framework Application, Risk and Compliance Reporting, Business Risk Assessment, Cyber Risk Management, Risk Compliance and Governance, Standard Procedures","description_format":"text","description_chars":4126,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Internet Service Providers","Mobile Networks"],"lifecycle":[{"event":"open","at":"2026-10-30T04:28:43Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":29,"reasons":["seen:5","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":93744,"is_top_pay":false},"html_url":"https://alion.io/job/simba-telecom-cybersecurity-governance-risk-compliance-grc-analyst","json_url":"https://alion.io/job/simba-telecom-cybersecurity-governance-risk-compliance-grc-analyst.json","meta":{"generated_at":"2026-11-05T05:56:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7212,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49915},"rest":"https://alion.io/mcp/rest/get_company?id=49915"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsimba-telecom-cybersecurity-governance-risk-compliance-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsimba-telecom-cybersecurity-governance-risk-compliance-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsimba-telecom-cybersecurity-governance-risk-compliance-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/simba-telecom-cybersecurity-governance-risk-compliance-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsimba-telecom-cybersecurity-governance-risk-compliance-grc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3505281}},{"tool":"search_jobs","arguments":{"company":"simba.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3505281},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}