Role Summary
Hands-on resilience professional who plans and runs DR and security tabletop exercises for a Singapore public sector engagement, with a sound overall knowledge of GRC. The role works with infrastructure teams, application owners and service providers to test recovery and response, reports results to the Authority and follows corrective actions through to closure.
The annual workload includes one DR exercise and one security tabletop exercise. The role also supports the GRC Lead on risk, compliance and audit activities.
Key Responsibilities
- Plan and design the annual DR exercise and security tabletop exercise, including scenarios and success criteria
- Coordinate exercise participants across the Authority, infrastructure teams, application owners and service providers
- Run DR tests and facilitate tabletop sessions on incident response, escalation and decision-making
- Record recovery times, deviations and observations, and prepare the post-exercise report
- Work with application and business owners to update recovery plans, incident procedures and runbooks
- Track exercise corrective actions through to closure
- Support the GRC Lead with risk register updates, compliance evidence and audit requests
Required Skills and Experience
- Proven experience planning and running DR exercises and security tabletop exercises
- Strong understanding of BCP and DR concepts, including BIA, RTO, RPO and recovery strategies
- Experience reviewing and updating DR plans, incident response procedures and runbooks
- Overall GRC knowledge across risk management, compliance and audit
- Working knowledge of Singapore Government IM8 policies and ISO 27001
- Strong facilitation, reporting and MS Office skills
Preferred Qualifications
- ISO 22301 Lead Implementer or Lead Auditor
- DRI CBCP or BCI CBCI
- CISA or ISO/IEC 27001 Lead Auditor
Desired Competencies
- Calm and structured under exercise conditions
- Confident facilitator with technical and business teams
- Strong attention to detail in recording results
- Persistent follow-up on actions and timelines