Cybersecurity Risk & Assurance Specialist

General Key Requirements:

Location: Singapore

Skills: Cybersecurity Professional

Certification: CISSP, CISM, CRISC, GIAC, OSCP, CEH

Domain: Aviation

Experience: 4-6 years

About the Role (6 months rolling contract)

We are looking for a motivated and client-focused Cybersecurity Consultant/ Senior Consultant to

support the delivery of cybersecurity advisory, risk, governance, and compliance engagements across

clients in Singapore and the broader SEA region.

The successful candidate will help organizations identify cyber risks, assess security controls, improve

governance frameworks, and strengthen cyber resilience. This role provides an opportunity to work with

senior client stakeholders while developing expertise across multiple cybersecurity domains.

Key Responsibilities

Cybersecurity Advisory & Assessment

 Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.

 Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory

requirements.

 Assess cybersecurity governance, policies, standards, regulatory and control environments.

 Support the development of cybersecurity strategies, roadmaps, and improvement plans.

 Identify cyber risks and recommend practical remediation measures.

Risk & Compliance

 Support delivery of:

o Cybersecurity Risk Assessments

o Third-Party Risk Assessments

o Security Maturity Assessments

o Security Governance Reviews

o Incident Response Readiness Assessments

o Regulatory Compliance Reviews

Assist clients in meeting requirements related to:

o NIST CSF

o ISO 27001

o MAS TRM Guidelines

o Singapore PDPA

o GDPR and other applicable regulations

Client Engagement

 Conduct stakeholder interviews, workshops, and assessment sessions.

 Document findings, risks, and recommendations in clear and concise reports.

 Present assessment outcomes and remediation recommendations to client teams.

 Support project managers and engagement leads in the delivery of cybersecurity programs.

Required Experience

 4-6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber

Consulting.

 Experience delivering cybersecurity assessments, Audit, Compliance and advisory engagements.

 Strong understanding of information security principles, risk management, and security testing.

 Experience working with enterprise clients or large organizations.

 Ability to manage work independently while collaborating effectively within project teams.

Preferred Technical Skills

Experience in several of the following areas:

 Cybersecurity Risk Management

 Security Governance

 NIST Cybersecurity Framework (NIST CSF)

 ISO 27001

 Third-Party Risk Management

 Incident Response and Recovery

 Vulnerability Management

 Red teaming exercises

 Penetration testing

Education

Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer

Science, or a related field.

Preferred Certifications

 CISM

 CISSP (or pursuing)

 CRISC

 CEH

 GIAC

 OSCP

Key Competencies

 Strong analytical and problem-solving skills

 Excellent report writing and documentation abilities

 Effective verbal and written communication skills

 Client-facing consulting experience

 Stakeholder management and relationship-building skills

 Ability to translate technical concepts into business-friendly language

 Attention to detail and quality-focused delivery

 Strong teamwork and collaboration mindset

What Success Looks Like

 Delivers cybersecurity assessments and advisory engagements on time and with high quality.

 Builds trusted working relationships with client stakeholders.

 Produces actionable and practical cybersecurity recommendations.

 Contributes positively to project teams and client outcomes.

 Demonstrates continuous learning and growth in cybersecurity consulting.

Ideal Candidate

A cybersecurity professional with 4-6 years of experience who has hands-on exposure to cyber risk,

governance, compliance, and assessment activities, and is looking to further develop their consulting

and advisory skills within a fast-paced consulting environment.