Cybersecurity Consultant (GRC) IJO

2-5 Years

SGD 4,500 - 5,500 per month

Job Description

Key Responsibilities

Conduct cybersecurity risk assessments and compliance gap assessments.
Review clients cybersecurity governance frameworks, policies, procedures, and controls.
Develop and maintain cybersecurity risk registers, treatment plans, remediation trackers, and compliance matrices.
Support the implementation and maintenance of information security management systems.
Assess cybersecurity controls through interviews, document reviews, walkthroughs, and evidence validation.
Prepare cybersecurity policies, standards, procedures, guidelines, and supporting templates.
Support internal audits, external audits, certification consultancy, and regulatory reviews as needed.
Assist clients in preparing for cybersecurity certifications, customer assessments, and compliance obligations.
Conduct third-party cybersecurity risk assessments and security due diligence.
Track audit findings, compliance gaps, corrective actions, and risk treatment activities.
Prepare assessment reports, management presentations, dashboards, and executive summaries.
Facilitate workshops and meetings with business owners, system owners, technical teams, and management.
Provide practical recommendations to improve cybersecurity governance, risk management, and control effectiveness.
Support proposal preparation, project planning, and other cybersecurity consulting activities.
Other ad hoc duties as assigned.

Requirements

Diploma or degree in Cybersecurity, Information Technology, Computer Science, Information Security or a related discipline.
Relevant experience in cybersecurity consulting, governance, risk, compliance, audit, information security, or technology risk.
Good understanding of cybersecurity controls, risk management principles, compliance requirements, and security governance.
Ability to review policies, procedures, system documentation, and supporting evidence.
Ability to explain cybersecurity risks and requirements to both technical and non-technical stakeholders.
Ability to manage multiple assignments and work independently or as part of a project team.

Preferred Qualifications