Cyber Risk Assurance Consultant

About the role

A Cyber Risk Assurance Consultant delivers audit and assessment work, locally and overseas, reviewing clients' policies, procedures, standards and guidelines against relevant security standards. The role covers presales activities, fieldwork and presenting findings to stakeholders.

Key responsibilities

• Deliver high-quality audit or assessment work, locally and overseas
• Craft proposals, audit and engagement plans and execute tasks according to project schedules
• Take part in presales activities such as client discussions and tender briefings
• Work with key client stakeholders to identify requirements, define scope and perform fieldwork
• Review clients' policies, procedures, standards and guidelines against relevant security standards
• Identify gaps and clearly state observations, root causes and implications
• Recommend actions based on best practice and present findings to stakeholders

Required profile

• Diploma or Bachelor's degree in a related field, or equivalent experience
• At least 2-4 years of audit experience in IT, OT or cloud environments
• One or more industry certifications such as CISSP, CISA, CRISC, IEC 62443 or cloud certifications

Required skills

• Knowledge of cybersecurity concepts such as threat identification, information protection, threat detection, incident response and BCP/DR
• Familiarity with Singapore laws and regulations (Cybersecurity Act, PDPA, IM8, MAS TRM)
• Familiarity with information security frameworks such as NIST Cybersecurity Framework, PCI DSS and ISO 27001
• Data visualisation and good presentation skills; ability to work under pressure and independently