Cybersecurity Risk & Assurance Consultant

About the role

Infosys is looking for a Cybersecurity Consultant or Senior Consultant to support cybersecurity advisory, risk, governance and compliance engagements for clients in Singapore and the broader Southeast Asia region. The consultant helps organisations identify cyber risks, assess security controls, improve governance frameworks and strengthen cyber resilience, working with senior client stakeholders.

Key responsibilities

• Cybersecurity risk and maturity assessments using industry-standard frameworks, including gap assessments against NIST CSF, ISO 27001, CIS Controls and regulatory requirements
• Assess cybersecurity governance, policies, standards, regulatory and control environments, and support the development of strategies, roadmaps and improvement plans
• Identify cyber risks and recommend practical remediation measures
• Support delivery of cybersecurity risk assessments, third-party risk assessments, security maturity assessments, security governance reviews, incident response readiness assessments and regulatory compliance reviews
• Help clients meet NIST CSF, ISO 27001, MAS TRM, Singapore PDPA, GDPR and other applicable regulations
• Conduct stakeholder interviews, workshops and assessment sessions, document findings in clear reports and present results to client teams
• Support project managers and engagement leads in delivering cybersecurity programmes

Required profile

• 4-6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk or Cyber Consulting
• Experience delivering cybersecurity assessments, audit, compliance and advisory engagements
• Experience with enterprise clients or large organisations
• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science or a related field
• Preferred certifications: CISM, CISSP (or pursuing), CRISC, CEH, GIAC, COSCP

Required skills

• Preferred: cybersecurity risk management, security governance, NIST CSF, ISO 27001, third-party risk management, incident response, vulnerability management, red teaming and penetration testing
• Strong analytical, problem-solving and report-writing skills, and ability to communicate technical concepts to non-technical audiences