Kerja Sepenuh Masa, IT Compliance - Governance Specialist (Sea Cloud) di RevUp Proservices Pte Ltd - Maukerja

Job Description

• Work with internal stakeholders to ensure IT policies, processes and controls comply with regulatory, industry and customer requirements.
• Develop and maintain IT governance, risk and compliance frameworks, including SOC 2, ISO 27001, PDPA and GDPR.
• Identify and assess IT and cybersecurity risks, recommend improvements and coordinate risk mitigation activities.
• Implement and monitor IT controls covering cloud infrastructure, access management, data protection, change management and cybersecurity.
• Coordinate internal and external audits, security assessments and certification exercises.
• Conduct regular control testing, review audit evidence and follow up on identified gaps and corrective actions.
• Assess third-party security documentation, including SOC reports, ISO certifications and security questionnaires.
• Maintain risk registers, compliance records, control documentation and audit evidence.
• Support the integration of new systems, products and services into existing IT governance and compliance frameworks.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity or a related discipline.
• Minimum 3 years of relevant experience in IT compliance, IT risk management, information security or IT audit.
• Good understanding of IT risk assessments, control design, implementation and testing.
• Familiarity with ISO 27001, SOC 2 and data protection regulations such as PDPA and GDPR.
• Basic understanding of cloud computing and IT infrastructure, including IAM, containerisation and network security.
• Experience supporting external audits, security certifications or compliance assessments.
• Strong communication, documentation and stakeholder management skills.
• Able to manage multiple priorities and work independently in a fast-paced environment.
• Professional certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Auditor will be an advantage.
• Exposure to AI governance frameworks such as ISO 42001 or NIST AI RMF will be an added advantage.