Cybersecurity Lead Consultant
We are looking for a Cybersecurity Lead Consultant to drive our Governance, Risk and Compliance (GRC) practice. This is a hands-on leadership role with three parts: winning new business through pre-sales consulting, delivering high-quality GRC engagements, and building the practice.
You will lead a team of four consultants and act as a trusted advisor to clients. This includes serving as a virtual CISO (vCISO) for SMEs working towards recognised cybersecurity certifications, and helping us launch new AI governance and AI security services.
Key ResponsibilitiesPre-Sales and Business Development
• Engage prospective clients to understand their business, risk profile and compliance needs, and shape tailored cybersecurity and AI governance solutions.
• Lead discovery sessions, presentations and workshops with stakeholders ranging from business owners to C-level executives.
• Prepare proposals, statements of work, effort estimates and pricing with the sales team.
• Respond to RFPs, RFQs and tenders, including technical and compliance sections.
• Identify upsell and cross-sell opportunities across the Genesis Networks service portfolio.
Consulting and Service Delivery• Act as vCISO for SME clients, guiding them through readiness assessments, gap remediation and certification audits.
• Deliver GRC engagements, including risk assessments, gap analyses, internal audits and compliance reviews.
• Lead ISO/IEC 27001 information security management system (ISMS) implementation and audit-readiness engagements.
• Lead ISO/IEC 42001 AI management system (AIMS) engagements, covering AI governance, AI risk and impact assessments, and certification readiness.
• Advise clients on securing their AI systems using ISO/IEC 27090 guidance, including AI-specific threats such as data poisoning, model manipulation and prompt injection.
• Develop security and AI policies, standards, procedures and incident response plans.
• Advise on alignment with frameworks and regulations such as NIST CSF, PDPA and MAS TRM.
• Present findings and practical recommendations to management and boards.
• Ensure engagements are delivered on time, within scope and to a high standard.
Practice Development• Shape and grow the GRC practice by defining service offerings, delivery methods, templates and toolkits.
• Build and launch our ISO/IEC42001 and ISO/IEC 27090 service lines, integrating them with existing ISO/IEC27001 offerings.
• Package repeatable, scalable services for the SME market.
• Track regulatory change, emerging threats and AI developments, and turn them into new service opportunities.
• Contribute thought leadership through webinars, workshops, articles and industry events.
Team Leadership• Lead, coach and mentor a team of four cybersecurity consultants.
• Plan and allocate resources across concurrent client engagements.
• Review team deliverables for quality, accuracy and consistency.
• Support the team's professional development, including upskilling in AI governance and security.
Requirements• Bachelor Degree in a related field.
• At least 4 years of cybersecurity experience, including at least 1 year in GRC, audit or advisory roles.
• Proven pre-sales or client-facing consulting experience, including proposal writing and solution scoping.
• Strong working knowledge of ISO/IEC 27001 and related frameworks such as NIST CSF and CIS Controls, plus local requirements such as PDPA and MAS TRM.
• Understanding of AI governance and AI risk concepts, with interest in building expertise in ISO/IEC 42001 andISO/IEC 27090.
• Experience leading or mentoring a team of consultants.
• Excellent communication and presentation skills, with the ability to explain technical risk in business terms.
• Commercial awareness and a business-development mindset.