GRC Specialist

About BIT:

BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group. Headquartered in Singapore and founded in 2019, BIT bridges traditional finance and digital assets through governance-driven financial services and technology.

The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume. BIT offers services including custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets (RWA), serving institutional and professional investors globally.

BIT Group entities maintain a licensed and regulated footprint across Singapore, Hong Kong, Switzerland, the United Kingdom, the United States and Bhutan.

For more information, visit www.bit.com

Why Join Us:

At BIT, we tackle complex problems as a team. We encourage openness and promote transparency, respect, and inclusivity. Every team member is valued and has a voice that can be heard. We are always in search of intellectually curious and entrepreneurial individuals who are keen on making an impact in the crypto ecosystem and in building a better product for the next one billion users.

Job Responsibilities:

• Compliance Program Support: Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2. Prepare and maintain policies, procedures, and control documentation.
• Risk Management & Assurance: Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups. Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits.
• Control Assessment & Evidence Management: Assist with internal and external control assessments and control testing. Collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure.
• Process Improvement: Help identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team.
• Stakeholder Support: Work with technical and business teams to explain compliance requirements, gather the information needed for assessments, and support security reviews for new products and business initiatives.

Job Requirements:

• Bachelor's degree in Computer Science, Information Systems, or a related technical discipline.
• A minimum of 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role.
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS).
• Hands-on experience supporting compliance work against frameworks and standards such as MAS Technology Risk Management (TRM) Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus.
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines.
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Policy. <https://www.bit.com/privacy-candidate>