Consultant / Senior Consultant - Cybersecurity Risk & Assurance Specialist

We are looking for a motivated and client-focused Cybersecurity Consultant/ Senior Consultant to support the delivery of cybersecurity advisory, risk, governance, and compliance engagements across clients in Singapore and the broader SEA region.

The successful candidate will help organizations identify cyber risks, assess security controls, improve governance frameworks, and strengthen cyber resilience. This role provides an opportunity to work with senior client stakeholders while developing expertise across multiple cybersecurity domains.

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, regulatory and control environments.
• Support the development of cybersecurity strategies, roadmaps, and improvement plans.
• Identify cyber risks and recommend practical remediation measures.

• Support delivery of:
• Cybersecurity Risk Assessments
• Third-Party Risk Assessments
• Security Maturity Assessments
• Security Governance Reviews
• Incident Response Readiness Assessments
• Regulatory Compliance Reviews
• Assist clients in meeting requirements related to:
• NIST CSF
• ISO 27001
• MAS TRM Guidelines
• Singapore PDPA
• GDPR and other applicable regulations

• Conduct stakeholder interviews, workshops, and assessment sessions.
• Document findings, risks, and recommendations in clear and concise reports.
• Present assessment outcomes and remediation recommendations to client teams.
• Support project managers and engagement leads in the delivery of cybersecurity programs.

• 4-6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
• Experience delivering cybersecurity assessments, Audit, Compliance and advisory engagements.
• Strong understanding of information security principles, risk management, and security testing.
• Experience working with enterprise clients or large organizations.
• Ability to manage work independently while collaborating effectively within project teams.

Experience in several of the following areas:

• Cybersecurity Risk Management
• Security Governance
• NIST Cybersecurity Framework (NIST CSF)
• ISO 27001
• Third-Party Risk Management
• Incident Response and Recovery
• Vulnerability Management
• Red teaming exercises
• Penetration testing

• CISM
• CISSP (or pursuing)
• CRISC
• CEH
• GIAC
• OSCP

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.

• Strong analytical and problem-solving skills
• Excellent report writing and documentation abilities
• Effective verbal and written communication skills
• Client-facing consulting experience
• Stakeholder management and relationship-building skills
• Ability to translate technical concepts into business-friendly language
• Attention to detail and quality-focused delivery
• Strong teamwork and collaboration mindset

• Delivers cybersecurity assessments and advisory engagements on time and with high quality.
• Builds trusted working relationships with client stakeholders.
• Produces actionable and practical cybersecurity recommendations.
• Contributes positively to project teams and client outcomes.
• Demonstrates continuous learning and growth in cybersecurity consulting.

A cybersecurity professional with 4-6 years of experience who has hands-on exposure to cyber risk, governance, compliance, and assessment activities, and is looking to further develop their consulting and advisory skills within a fast-paced consulting environment.