Security GRC Specialist

As a Security GRC Specialist at BIT, you support the implementation and maintenance of our compliance framework across certifications such as ISO 27001, ISO 27701, and SOC 1/2. You work with technical and business teams to explain compliance requirements, conduct vendor security assessments, and help identify gaps in processes and controls within a regulated financial services environment.

What you'll do

• Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2, and prepare and maintain policies, procedures, and control documentation
• Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups
• Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits
• Assist with internal and external control assessments and control testing, collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure
• Identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team
• Work with technical and business teams to explain compliance requirements, gather information needed for assessments, and support security reviews for new products and business initiatives

What you bring

• A Bachelor's degree in Computer Science, Information Systems, or a related technical discipline
• A minimum of 3 years of experience in Security Risk Management, Governance and Compliance, IT audit, or a similar role
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS)
• Hands-on experience supporting compliance work against frameworks and standards such as MAS Technology Risk Management Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues

Nice to have

• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP

About BIT

BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group headquartered in Singapore. The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume, offering custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets to institutional and professional investors globally. BIT Group entities maintain a licensed and regulated footprint across Singapore, Hong Kong, Switzerland, the United Kingdom, the United States, and Bhutan.