Cybersecurity Consultant
- Compensation
- Not disclosed
- Location
- Paya Lebar Air Base, East Region
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- • Diploma or degree in Cybersecurity, Information Technology, Computer Science, Information Security or a related discipline.
- • Relevant experience in cybersecurity consulting, governance, risk, compliance, audit, information security, or technology risk.
- • Good understanding of cybersecurity controls, risk management principles, compliance requirements, and security governance.
- • Ability to review policies, procedures, system documentation, and supporting evidence.
- • Strong report writing, documentation, analytical, and problem-solving skills.
- • Good communication and presentation skills.
- • Ability to explain cybersecurity risks and requirements to both technical and non-technical stakeholders.
- • Ability to manage multiple assignments and work independently or as part of a project team.
- • Strong attention to detail, professionalism, and commitment to confidentiality.
Nice to have
- Relevant professional certifications will be advantageous, including:
- • CISSP;
- • CISM;
- • CISA;
- • CRISC;
- • ISO/IEC 27001 Lead Implementer;
- • ISO/IEC 27001 Lead Auditor;
- • Experience conducting cybersecurity risk assessments or compliance reviews.
- • Experience developing cybersecurity policies, procedures, and risk registers.
- • Experience supporting ISO/IEC 27001 implementation, certification, or audit activities.
- • Experience with regulatory, customer, or third-party security assessments.
- • Experience working in consulting, professional services, government, critical infrastructure, financial services, healthcare, technology, or other regulated sectors.
- • Experience managing client stakeholders and preparing professional consulting deliverables.
- Key Competencies
- • Cybersecurity governance;
- • Risk assessment and risk treatment;
- • Regulatory and standards compliance;
- • Policy and procedure development;
- • Audit and assurance;
- • Third-party risk management;
- • Control assessment;
Full description
Cybersecurity Consultant
Job Overview
We are looking for a Cybersecurity Consultant with a focus on Governance, Risk and Compliance to support client engagements involving cybersecurity risk management, regulatory compliance, security governance, audit readiness, and policy development.
The successful candidate will work closely with clients, management, technical teams, auditors, and other stakeholders to assess cybersecurity risks, identify control gaps, develop practical recommendations, and support the implementation of cybersecurity frameworks and improvement programmed.
This role is suitable for candidates with experience in cybersecurity consulting, information security governance, risk management, compliance, internal audit, or related advisory functions.
Key Responsibilities
- Conduct cybersecurity risk assessments and compliance gap assessments.
- Review clients’ cybersecurity governance frameworks, policies, procedures, and controls.
- Develop and maintain cybersecurity risk registers, treatment plans, remediation trackers, and compliance matrices.
- Support the implementation and maintenance of information security management systems.
- Assess cybersecurity controls through interviews, document reviews, walkthroughs, and evidence validation.
- Prepare cybersecurity policies, standards, procedures, guidelines, and supporting templates.
- Support internal audits, external audits, certification consultancy, and regulatory reviews as needed.
- Assist clients in preparing for cybersecurity certifications, customer assessments, and compliance obligations.
- Conduct third-party cybersecurity risk assessments and security due diligence.
- Track audit findings, compliance gaps, corrective actions, and risk treatment activities.
- Prepare assessment reports, management presentations, dashboards, and executive summaries.
- Facilitate workshops and meetings with business owners, system owners, technical teams, and management.
- Provide practical recommendations to improve cybersecurity governance, risk management, and control effectiveness.
- Support proposal preparation, project planning, and other cybersecurity consulting activities.
Relevant Standards and Frameworks
The role may involve working with recognized cybersecurity standards and frameworks, including:
- ISO/IEC 27001;
- NIST Cybersecurity Framework;