Cyber GRC Specialist

As a Cyber GRC Specialist at InvestaX, you will contribute to the high-level design of policies, standards, procedures and guidelines for our tokenization platforms and systems. You will assist in managing the overall governance framework, supporting compliance initiatives, and handling security and technology risks within the company's risk appetite. InvestaX operates a Tokenization SaaS platform licensed by the Monetary Authority of Singapore, enabling the issuance, trading, and custody of real-world assets.

What you'll do

• Lead the design, implementation, and ongoing management of cyber risk management activities
• Review, update and maintain the information security policies and procedures
• Serve as the subject matter expert in driving Governance, Risk, and Compliance (GRC) adoption within the technology space
• Conduct and coordinate compliance and control assessment activities, ensuring alignment with regulatory requirements
• Own the user awareness training and phishing campaigns within the organization
• Establish and own a third-party security review process within the organization
• Work with the Security Engineer and other teams to execute the cyber strategy
• Play a key role in internal reporting of technology and cyber risk to senior leadership

What you bring

• A Bachelor's degree in computer science, information security, law, business or a related field
• 3+ years of experience in a similar capacity
• Strong understanding of information security principles and practices
• Knowledge of at least two of the following information security frameworks and standards: NIST Cybersecurity Framework (CSF), ISO 27001, COBIT, SOC 2 / AICPA TSC 2017, or PCI DSS
• At least one of the following credentials: ISACA CISA (Certified Information Systems Auditor), ISACA CISM (Certified Information Security Manager), ISACA CRISC (Certified in Risk and Information Systems Control), ISC CISSP (Certified Information Systems Security Professional), ISC CCSP (Certified Cloud Security Professional), ISACA CCAK (Certificate of Cloud Auditing Knowledge), CSA CCSK (Certificate of Cloud Security Knowledge), or ISO 27001 Lead Auditor / Implementer
• Proven experience in developing Risk Management Frameworks
• Excellent problem-solving and analytical skills
• Excellent written and verbal communication skills in English

Nice to have

• Experience in a regulated environment
• Exposure to MAS Technology Risk Management Guidelines
• Exposure to DevSecOps and Cloud Security

About InvestaX

InvestaX operates a Tokenization SaaS platform licensed by the Monetary Authority of Singapore to deal in and operate an organised market for securities and real-world asset (RWA) tokens. The platform enables the issuance, trading, and custody of real-world assets with seamless banking integration, KYC verification, OTC trading, and smart contract deployment.