Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 13 days ago

Governance, Risk, and Compliance (GRC) Manager

LogicalisUS93 open roles

Where
Mapletree Business City, SG
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGovernance, Risk, and Compliance (GRC) ManagerLogicalisUS · Mapletree Business City, SG

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on LogicalisUS's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. LogicalisUS postings stay open a median of 42 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 13 days ago

LogicalisUS median: 42 days open

The posting

About Us

At Logicalis Asia Pacific, this is where you belong, grow, and thrive — at one of APAC's leading AI-driven technology integrators.

As the Architects of Change™, we combine global expertise with local insight to help organisations accelerate their journey toward becoming AI-ready enterprises. With 7,000+ professionals across 30 territories and more than 10,000 clients worldwide, we deliver lifecycle services across cloud, connectivity, collaboration, cybersecurity, and managed services — providing real-time visibility and intelligence across our clients' digital ecosystems.

You'll belong as part of a collaborative regional team embedded within a global organisation. You'll grow through hands-on experience with the world's leading technology partners, supported by investment in certifications, consulting capability, and cross-border opportunity. And you'll thrive in a culture built on inclusion, trust, and continuous improvement.

Logicalis is proud to be a Great Place to Work® Certified™ organisation across multiple APAC markets — because the commitment we bring to our clients belongs equally to our people.

Join us and help shape the future of technology across APAC.

Job Responsibilities:

1. Governance and Frameworks

· Maintain and operationalise the ISMS, PIMS and AIMS including policies, standards, procedures and controls, in line with ISO 27001, ISO 27701 & ISO42001.

· Ensure governance documentation is current, version-controlled and aligned with relevant regulatory and industry standards (e.g. ISO 27001, ISO 27701, ISO42001, NIST CSF, Singapore and Malaysia PDPA).

· Act as the Subject Matter Expert on IT GRC, advising IT, business and project teams on policy, risk and control matters.

· Monitor adherence to internal security policies and drive adoption through training, communication and stakeholder engagement.

2. IT Risk Management

· Maintain the IT risk register and facilitate risk identification, assessment, treatment and monitoring across business and technology functions.

· Conduct periodic risk assessments covering infrastructure, applications, cloud services, data and third parties.

· Track risk treatment plans to completion and report on risk trends, emerging risks and control effectiveness.

3. Compliance and Certifications

· Manage ISO 27001/ISO27701/ISO42001 compliance and certification activities for all entities in Singapore and Malaysia, ensuring control requirements are met.

· Support compliance with frameworks and certifications relevant to the business, such as Singapore's Cyber Trust Mark and Data Protection Trustmark.

· Monitor regulatory developments, assess their impact on the organisation, and coordinate gap assessments and remediation.

· Track and report on security compliance metrics.

4. Controls and Audit

· Document and test key IT and information security controls to verify their design and operating effectiveness.

· Coordinate internal and external audits, including the Group cybersecurity internal audit, covering PBC list preparation, walkthroughs, evidence gathering and management responses, as the MR or Deputy MR.

· Track audit findings and remediation through to closure and report status to management.

· Maintain up-to-date information on the GRC platform for all entities.

5. Third-Party Risk

· Conduct vendor risk assessments and due diligence, particularly for critical, data-sensitive or outsourced services.

· Review client contracts and vendor agreements to ensure cybersecurity and risk-related clauses are appropriately addressed.

6. Incident and Business Continuity Support

· Support incident response, investigations, root cause analysis and lessons learned for security incidents.

· Support timely reporting of security and data breach incidents to regulators and clients where required.

· Contribute to business continuity and disaster recovery planning, testing and reporting.

7. Awareness, Reporting and Stakeholder Engagement

· Develop and deliver information security awareness training and track staff completion of mandatory training.

· Prepare clear, concise reports for management on GRC status, key risks and compliance posture.

· Work with departments such as Legal and HR, and stakeholders across Singapore and Malaysia, occasionally with regional offices to ensure consistent compliance and document control.

· Stay updated on emerging security threats, regulatory developments and industry trends.

· Other ad-hoc tasks as assigned.

Required Traits:

· Able to operate independently and own processes end-to-end with minimal supervision.

· Strong written and verbal communication, with the ability to translate technical and regulatory complexity into clear business language.

· Strong attention to detail and a structured, process-driven approach.

· Good project management skills to coordinate security and compliance initiatives across teams.

· Collaborative team player, able to work effectively across departments and countries.

Required Qualifications:

Essential

· Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management or a related field.

· 3 to 5 years of combined experience across GRC, IT risk, IT audit, information security or compliance roles.

· Solid working knowledge of ISO 27001, ISO 27701 and ISO42001, CREST and at least one other framework such as NIST CSF or COBIT.

· Hands-on experience running risk assessments, control testing and audit coordination.

· Working knowledge of data protection regulations, including Singapore and Malaysia PDPA.

Preferred

· Professional certifications such as ISO 27001/42001 Lead Auditor/Lead Implementer, CISA, CRISC or CISM.

· Experience with Cyber Trust Mark (CTM) or Data Protection Trustmark certification (DPTM).

· Familiarity with GRC tools (e.g. AuditBoard, DiligentOne, Risk4All, AON CyQu) and cloud platforms (M365, Azure, GWS & GCP).

· Exposure to GDPR and third-party or outsourcing risk frameworks.

· Experience in a regulated industry or an IT services or managed services environment.

Interested applicants please submit your application with your expected salary and notice period to be considered for the role. We regret that only shortlisted candidates will be notified.

As part of any recruitment process, we collect and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations. By applying to this post and sending us your resume, you agree to the collection, use and/or disclosure of your personal data in the manner as set out in our Data Protection Notice for Job Applicants which can be found

Logicalis is committed to protecting your privacy.

Click below to view the data protection notice.

https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf.

Interested applicants are invited to apply via our careers portal. Only shortlisted candidates will be notified.

As part of our recruitment process, we collect and process personal data relating to job applicants. By submitting your application, you consent to the collection, use, and/or disclosure of your personal data in accordance with our Data Protection Notice for Job Applicants.

At Logicalis, we are committed to creating a diverse and inclusive workplace where everyone can thrive.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against LogicalisUS's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on LogicalisUS's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    LogicalisUS's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.