Company Description PT ITSEC Asia Tbk is a leading cybersecurity company in Indonesia, listed on the Indonesian Stock Exchange (CYBR), with over 400 employees across five countries. The company delivers end-to-end cybersecurity services, including Consulting Services, Security Solutions Integration, and Managed Security Services. ITSEC Asia focuses on continuous protection of IT infrastructure against evolving cyber threats and supports compliance with stringent data protection and critical infrastructure regulations. With over a decade of experience and thousands of completed projects, ITSEC Asia collaborates with world-class technology partners across financial, telecommunications, energy, transportation, manufacturing, and other critical sectors. The company also provides specialized expertise in fraud prevention, Operational Technology (OT), and Industrial IoT (IIoT) security.
Role Description The Junior Cybersecurity GRC Consultant will support the design, implementation, and maintenance of governance, risk, and compliance frameworks for client organizations. In this full-time, on-site role based in Singapore, the consultant will assist in conducting risk assessments, reviewing security controls, and mapping regulatory and industry requirements to practical security measures. The role includes preparing reports and documentation, contributing to security policies and procedures, and helping monitor compliance with internal and external standards. The consultant will collaborate with senior team members, participate in client meetings, and assist in recommending remediation steps to improve overall security posture.
Qualifications
- Foundational skills in Cybersecurity and Information Security, with an understanding of governance, risk, and compliance principles.
- Knowledge of Network Security and Vulnerability Assessment techniques to identify and analyze security gaps.
- Exposure to Application Security concepts, including secure development practices and common application vulnerabilities.
- Ability to interpret relevant regulations and standards (e.g., ISO 27001, NIST, PCI DSS, local regulatory guidelines) and translate them into practical controls.
- Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
- Strong analytical, documentation, and report-writing skills, with attention to detail and accuracy.
- Effective communication and collaboration skills, with the ability to work in cross-functional teams and interact with clients professionally.
- Willingness to learn, adapt to evolving cybersecurity trends, and pursue relevant professional certifications (e.g., CompTIA Security+, ISO 27001 Lead Implementer, CISSP or CISM in the future).
