Cyber Security Consultant

Consultant / Senior Consultant - Cybersecurity

Location: Singapore

Practice: Cybersecurity Consulting

Experience: 5-10 Years

Employment Type: Full-Time

About the Role

We are looking for a motivated and client-focused Cybersecurity Consultant/ Senior Consultant to support the delivery of cybersecurity advisory, risk, governance, and compliance engagements across clients in Singapore and the broader SEA region.

The successful candidate will help organizations identify cyber risks, assess security controls, improve governance frameworks, and strengthen cyber resilience. This role provides an opportunity to work with senior client stakeholders while developing expertise across multiple cybersecurity domains.

Key Responsibilities

Cybersecurity Advisory & Assessment

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, and control environments.
• Support the development of cybersecurity strategies, roadmaps, and improvement plans.
• Identify cyber risks and recommend practical remediation measures.

Risk & Compliance

• Support delivery of:
• Cybersecurity Risk Assessments
• Third-Party Risk Assessments
• Security Maturity Assessments
• Cyber Due Diligence Reviews
• Security Governance Reviews
• Incident Response Readiness Assessments
• Regulatory Compliance Reviews
• Assist clients in meeting requirements related to:
• NIST CSF
• ISO 27001
• MAS TRM Guidelines
• Singapore PDPA
• GDPR and other applicable regulations

Client Engagement

• Conduct stakeholder interviews, workshops, and assessment sessions.
• Document findings, risks, and recommendations in clear and concise reports.
• Present assessment outcomes and remediation recommendations to client teams.
• Support project managers and engagement leads in the delivery of cybersecurity programs.

Practice Development

• Contribute to knowledge management, methodologies, and reusable assets.
• Stay current on cybersecurity trends, emerging threats, and regulatory developments.
• Support proposal development, research, and thought leadership initiatives as required.

Required Experience

• 5-10 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
• Experience delivering cybersecurity assessments and advisory engagements.
• Strong understanding of information security principles, risk management, and security controls.
• Experience working with enterprise clients or large organizations.
• Ability to manage work independently while collaborating effectively within project teams.

Preferred Technical Skills

Experience in several of the following areas:

• Cybersecurity Risk Management
• Security Governance
• NIST Cybersecurity Framework (NIST CSF)
• ISO 27001
• Third-Party Risk Management
• Identity & Access Management (IAM)
• Incident Response and Recovery
• Security Awareness Programs
• Cybersecurity Policies and Standards
• Cloud Security Fundamentals
• Data Protection and Privacy
• Vulnerability and Risk Management

Education & Certifications

Education

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.

Preferred Certifications

• CISA
• CISM
• CISSP (or pursuing)
• CRISC
• ISO 27001 Lead Auditor / Lead Implementer
• Security+
• Cloud Security Certifications (AWS, Azure, GCP)

Key Competencies

• Strong analytical and problem-solving skills
• Excellent report writing and documentation abilities
• Effective verbal and written communication skills
• Client-facing consulting experience
• Stakeholder management and relationship-building skills
• Ability to translate technical concepts into business-friendly language
• Attention to detail and quality-focused delivery
• Strong teamwork and collaboration mindset

What Success Looks Like

• Delivers cybersecurity assessments and advisory engagements on time and with high quality.
• Builds trusted working relationships with client stakeholders.
• Produces actionable and practical cybersecurity recommendations.
• Contributes positively to project teams and client outcomes.
• Demonstrates continuous learning and growth in cybersecurity consulting.

Ideal Candidate

A cybersecurity professional with 5-10 years of experience who has hands-on exposure to cyber risk, governance, compliance, and assessment activities, and is looking to further develop their consulting and advisory skills within a fast-paced consulting environment.