GRC Cybersecurity Consultant

About the Role

Based in Singapore, this full-time and permanent position offers an opportunity to join a rapidly expanding cybersecurity consultancy as a Governance, Risk, and Compliance (GRC) Cybersecurity Consultant. This role focuses on consulting organizations to understand and mitigate cyber risks, tighten governance, comply with regulations, and build secure environments. Each project is unique, offering new learning experiences and the chance to create meaningful impact.

Key Responsibilities

• Conduct cyber risk assessments and compliance gap analyses to identify vulnerabilities.
• Assist clients in developing and enhancing ISO 27001-based security programs.
• Develop comprehensive risk registers, treatment plans, and pragmatic security policies.
• Prepare clients for audits and ensure thorough tracking and closure of findings.
• Lead workshops and deliver insightful presentations to both technical teams and business executives.

Frameworks and Standards

Engage with multiple internationally and locally recognized frameworks including ISO/IEC 27001, NIST Cybersecurity Framework, IEC 62443, Secure-by-Design principles, data protection and privacy regulations, as well as Singapore-specific cybersecurity laws and industry standards.

Candidate Qualifications

• Possess a Diploma or Degree in Cybersecurity, IT, Computer Science, or a closely related discipline.
• Demonstrate practical experience in GRC, cybersecurity consulting, IT auditing, technology risk management, or compliance roles.
• Strong understanding of risk assessment methodologies, security controls, and audit-preparation processes.
• Excellent analytical abilities, meticulous attention to detail, and proficient writing skills.
• Confident communication skills capable of conveying cyber risks to both technical personnel and senior leadership.

Preferred Certifications and Experience

• Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are advantageous.
• Experience with ISO 27001 implementation or certification projects is highly beneficial.
• Background in regulated industries like financial services, healthcare, technology, government, or critical infrastructure is a plus.

Career Path Opportunities

Potential progression into roles such as Senior GRC Consultant, Cybersecurity Manager, Risk and Compliance Lead, Information Security Manager, or Security Governance Lead.

Additional Information and Terms

• Location: Singapore (onsite role).
• Compensation: Up to SGD 5,500 monthly.
• This opportunity is suited for those passionate about cybersecurity and eager to contribute to Singapore’s digital safety landscape.
• The role is supported by Cyberspark.ai, a Singapore-based talent solutions partner.