Cybersecurity Consultant / Senior Consultant

About the role

A Cybersecurity Consultant or Senior Consultant is sought to deliver cybersecurity advisory, risk, governance and compliance engagements for clients in Singapore and the wider SEA region. The consultant helps organisations identify cyber risks, assess security controls, improve governance frameworks and strengthen cyber resilience, working with senior client stakeholders.

Key responsibilities

• Cybersecurity risk and maturity assessments using industry-standard frameworks, including gap assessments against NIST CSF, ISO 27001, CIS Controls and regulatory requirements
• Assess cybersecurity governance, policies, standards and control environments, and support the development of strategies, roadmaps and improvement plans
• Identify cyber risks and recommend practical remediation measures
• Support cybersecurity risk assessments, third-party risk assessments, security maturity assessments, due diligence reviews, incident response readiness assessments, governance reviews and regulatory compliance reviews
• Help clients meet NIST CSF, ISO 27001, MAS TRM, Singapore PDPA, GDPR and other applicable regulations
• Run stakeholder interviews, workshops and assessment sessions, document findings in clear reports and present results to client teams
• Support project managers and engagement leads, contribute to knowledge management and reusable assets, and stay current on trends, threats and regulation

Required profile

• 5-10 years of experience in cybersecurity, information security, IT risk, technology risk or cyber consulting
• Experience delivering cybersecurity assessments and advisory engagements, and with enterprise or large clients
• Bachelor's degree in Cybersecurity, Information Security, IT, Computer Science or a related field
• Preferred certifications: CISSP (or pursuing), CRISC, ISO 27001 Lead Auditor/Implementer, Security+, cloud security certs (AWS, Azure, GCP)

Required skills

• Preferred: NIST CSF, ISO 27001, third-party risk management, IAM, incident response, security awareness, cloud security fundamentals, data protection, vulnerability and risk management
• Strong analytical, problem-solving and report-writing skills; client-facing consulting and stakeholder management