# Senior Software Engineer, Governance, Risk & Compliance (GRC), Singpass at GovTech Singapore

GovTech Singapore is hiring a Senior Software Engineer, Governance, Risk & Compliance (GRC), Singpass in Singapore, Singapore. Level rates it Little AI ●○○○; you can [apply on GovTech Singapore](https://jobsbylevel.com/go/80d119ac-a4f1-45d8-8223-fac2feb54f4d?utm_medium=ai-agent).

AI Level 1, AI centrality 37 out of 100. Singapore.

## Details

- Company: [GovTech Singapore](https://jobsbylevel.com/companies/govtech-singapore)
- AI level: AI Level 1 (score 37 out of 100)
- Location: Singapore
- Posted: August 6, 2026
- Apply: https://jobsbylevel.com/go/80d119ac-a4f1-45d8-8223-fac2feb54f4d?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=senior-software-engineer-governance-risk-compliance-grc-singpass-at-govtech-singapore-6336f3

## Description

GovTech is the lead agency driving Singapore's Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government's capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity. At GovTech, we offer you a purposeful career to make lives better, and we help our people master their craft through learning and development opportunities all year round. Singpass is Singapore's national digital identity system. It provides high-assurance authentication, digital signatures, corporate identity (Corppass) and government-verified data sharing (Myinfo) to millions of residents and thousands of government and private-sector services. Because it is critical national infrastructure, Singpass is audited continuously against strict security and regulatory controls. Today, most of that audit evidence is collected by hand, point in time, in screenshots and spreadsheets. We want to replace that with continuous, machine-verified compliance : every control measured live, every piece of evidence produced automatically, and every drift detected within minutes instead of at the next audit cycle. This is a hands-on software engineering role. You will design, write and operate production code and data pipelines. It is not a GRC analyst, audit management or policy-writing role. We are looking for engineers who treat compliance as a software problem: controls as code, evidence as data, audits as queries. [What you will be working on] You will join the Singpass GRC engineering effort, working with the Core Platform team, which runs the shared foundations that every Singpass product team builds on: multi-cluster OpenShift on AWS, Istio Ambient service mesh, GitLab CI, ArgoCD GitOps, OpenBao secrets management and YugabyteDB distributed SQL. Your job is to instrument these systems so that their compliance posture can be observed, measured and proven continuously, and to bring the results together in a single pane of glass that auditors, security and engineering leadership can query 24/7. Continuous Controls Monitoring & Evidence Automation Integrate with the delivery pipeline: Build integrations into GitLab CI and ArgoCD to capture change-management evidence automatically: who changed what, who reviewed and approved it, which tests and security scans ran, and what was deployed where. Target outcomes include signed artefacts, SBOMs, provenance attestations and separation of duties. Instrument the container platform: Collect and normalise control signals from OpenShift clusters, such as Compliance Operator / CIS benchmark results, admission and policy-engine decisions, RBAC and privileged-access state, network and authorization policies, image provenance and Kubernetes audit logs. Instrument the data tier: Build collectors for YugabyteDB clusters that cover database audit logs, role and privilege inventories, encryption and backup posture, and access reviews, while keeping overhead low on production workloads. Extend to the wider estate: Bring in signals from OpenBao (secret lifecycle, lease and rotation compliance), AWS (CloudTrail, Config, Security Hub, IAM), identity providers and SIEM, as the platform grows. Compliance Data Platform & Single Pane of Glass Design the evidence data model: Build a normalised, tamper-evident, time-series evidence store that maps raw technical signals to control objectives across frameworks (e.g. IM8, ISO/IEC 27001, NIST SP 800-53, CIS). Wherever possible, a single signal should satisfy many controls. Build the pipelines: Write reliable, idempotent ingestion and transformation pipelines with clear lineage, so that every metric on the dashboard can be traced back to its raw evidence. Deliver live audit views: Build dashboards and APIs that show real-time control status, drift, exceptions and remediation SLAs. Auditors

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/senior-software-engineer-governance-risk-compliance-grc-singpass-at-govtech-singapore-6336f3

Source: https://jobsbylevel.com/jobs/senior-software-engineer-governance-risk-compliance-grc-singpass-at-govtech-singapore-6336f3

## Cite this page

Level. https://jobsbylevel.com/jobs/senior-software-engineer-governance-risk-compliance-grc-singpass-at-govtech-singapore-6336f3.

Get job alerts: https://jobsbylevel.com/newsletter