Cyber Risk Consultant

1 week ago


Singapore Ensign InfoSecurity Full time

Overview We are looking for a Cyber Risk Consultant to join our consulting team. In this client-facing role, you will help clients strengthen their cybersecurity posture through risk assessments, security-by-design, and compliance activities. You will work closely with stakeholders to identify risks, recommend mitigation strategies, and ensure security is built into projects and systems from the start. What We're Looking For We are seeking someone who enjoys working across both governance and technical areas of cybersecurity. The ideal candidate is confident in reading and working with policies and compliance frameworks, and comfortable sitting in a design workshop or vendor meeting to provide input on security controls. Strong communication skills are essential, as you will represent clients in discussions and guide project teams through risk decisions. This role is a good fit for someone who is consulting-minded with hands-on involvement and delivering value in day-to-day engagements, not just high-level work. An interest in OT security will also be an advantage, whether you already have experience in this space or are eager to expand beyond IT security. Key Responsibilities Conduct cybersecurity risk assessments across IT and OT environments. Partner with project and application teams to embed security-by-design practices throughout the lifecycle, from procurement to design and implementation. Review and guide project risk assessments, ensuring findings and mitigation controls are adequate. Perform network and system architecture reviews, to ensure alignment with security requirements and industry best practices. Represent clients in vendor and stakeholder discussions, providing subject matter expertise. Support compliance and governance activities, including audits, gap assessments, and reporting against regulatory and industry requirements. Develop, evaluate, and maintain cybersecurity policies, standards, and procedures in line with frameworks such as ISO/IEC 27001 and applicable regulatory expectations. Contribute to the development of security awareness programs and other client-specific initiatives. Provide input into cybersecurity roadmaps and strategic initiatives, to support planning for emerging threats and regulatory expectations. Requirements 7+ years of experience in cybersecurity, with exposure to GRC, risk assessments and CISO office functions. Proven experience conducting risk assessments and guiding security-by-design practices across IT and OT environments. Strong understanding of OT and IT security concepts, technologies, and associated risks. Familiarity with recognized security frameworks and standards such as ISO/IEC 27001 and NIST. Strong communication and interpersonal skills, with the ability to represent clients in discussions and work effectively with both technical and non-technical stakeholders. Certifications such as CISSP, CISM, CISA, or CRISC are preferred. Seniority level Mid-Senior level Employment type Full-time Job function Consulting and Information Technology Industries IT Services and IT Consulting We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr



  • Singapore The Cyber Security Agency of Singapore Full time

    Overview What the role is: The Safer Cyberspace Division in CSA focuses on building national cyber resilience of organisations in Singapore. The division develops and manages national cybersecurity technology initiatives under the SG Cyber Safe programme, in order to enable a safer cyberspace. Examples of programmes which the division has rolled out include...

  • Cyber Reinsurance

    4 days ago


    Singapore Munich Re Full time

    **Cyber Reinsurance - Cyber Consultant**:Career Level 3 **Location**Singapore, Singapore Munich Re is one of the world’s leading providers of reinsurance, primary insurance, and insurance-related risk solutions. Established in 1975, our Singapore office is dedicated to supporting our growth in Singapore and serving as a regional hub and centre of...


  • Singapore Cyber Security Agency of Singapore (CSA) Full time

    Cybersecurity Consultant/Mgr (Cybersecurity Governance and Risk Assessment), SCD The Safer Cyberspace Division in CSA focuses on building national cyber resilience of organisations in Singapore. The division develops and manages national cybersecurity technology initiatives under the SG Cyber Safe programme, in order to enable a safer cyberspace. Examples of...


  • Singapore GETRONICS SOLUTIONS (S) PTE LTD Full time

    We are currently seeking an experienced professional to support us in performing backlog security assessment. **Job Description: - Delivery of risk assessment services of Digital - Review solution and architecture (data flow, infrastructure) artefacts, identify and assess security risks, recommend and prepare high-quality assessments detailing security...

  • Senior Consultant

    3 hours ago


    Singapore IKIGAI ENABLERS Full time

    **The Role Conduct NIST CSF risk assessments Work on global projects with a truly global team, with the support of over 300,000 technical staff from our organization. Contribute to the development of consulting go to market offerings and innovative solutions targeted at the C-Suite executive community that help them to understand and mitigate their cyber...


  • Singapore Cyber Security Agency of Singapore Full time

    What the role is: The Safer Cyberspace Division in CSA focuses on building national cyber resilience of organisations in Singapore. The division develops and manages national cybersecurity technology initiatives under the SG Cyber Safe programme, in order to enable a safer cyberspace. Examples of programmes which the division has rolled out include the CSA...

  • Cyber Risk Specialist

    2 weeks ago


    Singapore KRIS INFOTECH PTE. LTD. Full time

    Conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determine appropriate controls to mitigate risks. - Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions. **Requirements**: - Minimum total three years’ work experience as...


  • Singapore KPMG - Singapore Full time

    As part of the KPMG Cyber team, you will be working with experienced cyber security professionals and corporate partners under the 5 pillars of our Cyber business: **Cyber Strategy and Governance **professionals provide advice to CEOs, CISOs and CIOs on how to better manage cyber security by designing their Cyber Organisational Structure, and defining the...


  • Singapore KRIS INFOTECH PTE. LTD. Full time $80,000 - $120,000 per year

    Job Description:Conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determine appropriate controls to mitigate risks.Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.Requirements:Minimum total seven years' work experience as...


  • Singapore KPMG - Singapore Full time

    **Job Description - **Ethical Hacking**: - **Cybersecurity Risk & Governance**: - this discipline covers designing and implementing Cybersecurity frameworks; Cyber maturity assessments; organisational design for Cyber Security; Cloud security; design and rollout of cyber security processes such as Incident Management, Intrusion Detection, and Security...