C

Circles

Delivers corporate concierge and hospitality management

Cybersecurity Engineer - GRC, Governance, Assurance & Data Protection

Security Governance, Risk & ComplianceUpdated on Nov 12
Full-timeSingaporeNo salary listedHybrid

About the Job

Requirements

  • A degree in Information Technology, Cyber Security, or a comparable qualification.
  • At least 3 years of professional experience in audit, assurance, governance, or management consulting, or the ability to transfer skills across these functional responsibilities.
  • A good understanding of cybersecurity, data governance, and assurance initiatives for SaaS-based telecommunications platforms delivering B2B and B2C products.
  • Experience and knowledge of Big Four or Tier 2 consulting firms or the telecommunications industry is a plus.
  • Experience and knowledge of cloud infrastructure and security, DevSecOps, microservices architecture, or container security is a plus.
  • Experience and knowledge of industry standards including ISO 27001, ISO 27701, NIST, COBIT, PCI-DSS, or MTCS is a plus.
  • Experience and knowledge of global or regional data privacy regulations, including GDPR, PDPA, or PDPO, is a plus.
  • One or more professional certifications, such as CRISC, AAISM, AAIR, CGEIT, CDPSE, CSX-P, CISA, CISSP, or a Diploma in Data Protection, or equivalent, are a plus.

Responsibilities

  • Develop, mature, and operationalize cybersecurity frameworks, policies, procedures, guidelines, and baseline standards across the Group.
  • Ensure cybersecurity best practices are embedded in new initiatives and ongoing change management, and evaluate the security impact of initiatives.
  • Identify and risk-assess administrative, technical, and procedural measures to safeguard enterprise information assets, and drive their adoption.
  • Ensure organizational crown jewels are protected in accordance with regulatory and data protection requirements, including ISO 27701, PCI-DSS, and market-specific regulations such as PDPA and GDPR.
  • Drive internal risk assessments, third-party due diligence reviews, cybersecurity assurance activities, and audit-readiness reviews, and drive timely resolution of potential gaps.
  • Support the organizational roadmap for maintaining credentials such as ISO 27001 compliance, DPTM, and APEC CBPR, and establishing a SOC 2 compliance report.
  • Develop the data privacy and protection framework and enhance existing policies and work programs to align with relevant data privacy laws.
  • Support the day-to-day functioning of the Data Privacy Office by serving as a group point of contact for data privacy and protection issues.
  • Support privacy impact assessments and maintain records of processing activities.
  • Serve as a subject matter expert to stakeholders on privacy and data security matters, and participate in investigations of data privacy incidents.
  • Drive cybersecurity and privacy awareness across the Group by formulating learning curricula and rolling out training modules, ensuring completion remains above agreed metrics.
  • Develop focused training for staff involved in data handling and processing.
  • Promote a culture of security, information protection, and compliance across the Group.
  • Drive initiatives that enable stakeholders to adopt artificial-intelligence-related initiatives ethically and responsibly.
  • Provide internal stakeholders with advisory services on information security, privacy, and cybersecurity matters.

Desired Qualifications

  • Experience, knowledge, or certifications in the listed consulting, telecommunications, cloud security, DevSecOps, microservices, container security, standards, data privacy regulations, or professional certification areas are beneficial.

About the Company

Circles

Delivers corporate concierge and hospitality management

Circles delivers corporate concierge and hospitality management services designed to enrich workplaces and help people and organizations flourish. The core offering combines digital concierge tools with a dedicated Community Manager who drives engagement through technology, events, external partnerships, and on-site amenities, creating a connected and supportive work environment whether employees are in-office or remote. The service operates by blending personalized support with seamless service delivery across the workplace, guided by a data feedback loop that captures trends and employee input to continuously improve experiences. A key differentiator is the hands-on Community Manager role plus a visible brand ambassador for client companies, supported by a structured hospitality program that ensures consistent service delivery. Circles’ goal is to help businesses attract and retain top talent by enhancing workplace efficiency, employee engagement, and overall productivity.

Company size
51-200
Company stage
Series C
Total funding
$25.2M
Headquarters
Boston, MA
Founded
1997

Recently Posted Jobs

Explore more opportunities at Circles

See more jobs