GRC Specialist

As a GRC Specialist at BIT, you support the governance, risk, and compliance operations of a global digital asset financial services group managing over US$7 billion in assets. You work across compliance frameworks, risk assessments, control testing, and regulatory support to strengthen BIT's governance posture across its licensed entities in Singapore, Hong Kong, Switzerland, the United Kingdom, the United States, and Bhutan.

What you'll do

• Support the implementation and day-to-day maintenance of the compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2, and prepare and maintain policies, procedures, and control documentation
• Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups
• Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits
• Assist with internal and external control assessments and control testing, collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure
• Identify gaps in processes and controls, track changes in relevant regulatory and compliance requirements, and suggest practical improvements
• Work with technical and business teams to explain compliance requirements, gather information needed for assessments, and support security reviews for new products and business initiatives

What you bring

• A bachelor's degree in Computer Science, Information Systems, or a related technical discipline
• A minimum of 3 years of experience in Security Risk Management, Governance and Compliance, IT audit, or a similar role
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements such as MAS
• Hands-on experience supporting compliance work against frameworks and standards such as MAS Technology Risk Management Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues

Nice to have

• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP

About BIT

BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group headquartered in Singapore. The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume, offering custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets to institutional and professional investors worldwide.