Cybersecurity Consultant – GRC Advisory

About the role

Bitdefender is seeking a Cybersecurity Consultant specialized in Governance, Risk & Compliance (GRC) to join its Cybersecurity Advisory team. You will lead and deliver advisory engagements for clients across Singapore and the wider region, while also supporting global projects in Europe and the US.

Key responsibilities

• Plan, scope and deliver end‑to‑end GRC engagements, including cybersecurity reviews, ISO/IEC 27001 internal audits, compliance readiness assessments, risk assessments and policy framework development.
• Design and facilitate Incident Response tabletop exercises, creating tailored scenarios, running live injections and guiding technical and non‑technical stakeholders through high‑pressure decision‑making.
• Conduct client interviews, walkthroughs and documentation reviews; analyse findings against recognised frameworks and produce clear, risk‑rated reports with practical remediation roadmaps.
• Present findings and recommendations to C‑level executives, CISOs and security managers.
• Collaborate closely with Offensive Security, MDR, Product, Sales and Partner teams to ensure integrated service delivery.

Required profile

• Proven experience delivering GRC consulting engagements for enterprise or government clients.
• Strong client‑facing and communication skills, with the ability to work directly with senior security stakeholders.
• Ability to manage multiple projects across different regions and adapt to varied client environments.

Required skills

• ISO/IEC 27001
• NIS 2 framework
• CCSS framework
• Incident response planning and tabletop exercises
• Risk assessment methodologies

What we offer

• Opportunity to shape service offerings in a globally distributed, fast‑growing team.
• Exposure to cutting‑edge cybersecurity technologies and a broad client portfolio.
• Collaborative environment with experts across offensive security, MDR and product development.