GRC Specialist

About BIT: BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group. Headquartered in Singapore and founded in 2019, BIT bridges traditional finance and digital assets through governance-driven financial services and technology. The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume. BIT offers services including custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets (RWA), serving institutional and professional investors globally. BIT Group entities maintain a licensed and regulated footprint across Singapore, Hong Kong, Switzerland, the United Kingdom, the United States and Bhutan. For more information, visit www.bit.com Why Join Us: At BIT, we tackle complex problems as a team. We encourage openness and promote transparency, respect, and inclusivity. Every team member is valued and has a voice that can be heard. We are always in search of intellectually curious and entrepreneurial individuals who are keen on making an impact in the crypto ecosystem and in building a better product for the next one billion users. Job Responsibilities: • Compliance Program Support: Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2. Prepare and maintain policies, procedures, and control documentation. • Risk Management & Assurance: Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups. Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits. • Control Assessment & Evidence Management: Assist with internal and external control assessments and control testing. Collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure. • Process Improvement: Help identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team. • Stakeholder Support: Work with technical and business teams to explain compliance requirements, gather the information needed for assessments, and support security reviews for new products and business initiatives. Job Requirements: • Bachelor’s degree in Computer Science, Information Systems, or a related technical discipline. • A minimum of 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role. • Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS). • Hands-on experience supporting compliance work against frameworks and standards such as MAS Technology Risk Management (TRM) Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR. • Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus. • Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines. • Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues. By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Policy.