IT Security Audit and Compliance Consultant

IT Security Audit and Compliance Consultant

Important Information

Location: Singapore

KEY RESPONSIBILTIES

• Plan, execute, and report on IT security and compliance audits (internal and external).

• Assess effectiveness of IT general controls, application controls, and security processes.

• Ensure compliance with frameworks and regulations such as ISO 27001, NIST, PCI-DSS, SOC 2, GDPR, PDPA, or equivalent.

• Support risk assessments and ensure identified gaps are tracked and remediated.

• Partner with stakeholders to implement audit recommendations and corrective actions.

• Maintain evidence repositories for audit readiness.

• Contribute to policy and procedure reviews to align with regulatory requirements.

• Advise on security best practices to strengthen overall compliance posture

REQUIREMENT

• IT audit, compliance, or Information Security

• Exposure to GRC platforms (Archer, ServiceNow, OneTrust, etc.)

• Hands-on audit experience (ITGC, SOC, ISO 27001, PCI-DSS, NIST)

• Certifications - CISA / CISSP / CISM / ISO 27001 LA/LI

• Experience with ITGC, control design/effectiveness assessments

• Ability to write audit reports, present findings, work with stakeholders

• IT audit, compliance, or Information Security

About Encora

Encora is a global company that offers Software and Digital Engineering solutions. Our practices include Cloud Services, Product Engineering & Application Modernization, Data & Analytics, Digital Experience & Design Services, DevSecOps, Cybersecurity, Quality Engineering, AI & LLM Engineering, among others.

At Encora, we hire professionals based solely on their skills and do not discriminate based on age, disability, religion, gender, sexual orientation, socioeconomic status, or nationality