Information security grc lead | cloud security | nist - ref. e47248023

• Work closely with CISO and senior leaders to embed security governance across all business units

About the company

Our client is an established listed company with over 30 years of experience who is a market leader within their industry. As part of their plan to invest in technology, they are now hiring an experienced IT Governance Risk & Compliance (GRC) Lead to join their team.

• Develop, implement, and maintain the ISMS based on ISO 27001, NIST CSF, and other leading frameworks.
• Manage the GRC life-cycle: risk identification, assessment, control design, treatment, monitoring, and reporting.
• Manage internal and external audits; oversee remediation plans and validate efficacy.
• Define and refine security policies, standards, and procedures; lead ongoing compliance efforts with PDPA, PCI DSS, HIPAA, GDPR, SOC 2 (as applicable).
• Deliver security training and awareness communication to enhance security culture.
• Stay ahead of the curve — monitor industry changes, emerging threats, and regulatory updates; translate into policy and upfront risk management.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in Information Security. Exposure to cloud security will be of added advantage.

Candidates with regional / global coverage will be highly preferred.

Whats on offer

This is an excellent opportunity to join an established company with strong support from business stakeholders to invest in information security.

• skills

• qualifications

• education

Associate Degree/Diploma

share this job.