Cyber Risk Manager (Financial Services), Risk Consulting

Ernst & Young Advisory PTE. LTD.; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

A leading consulting firm in Singapore is seeking a Cyber Risk Manager to assess and implement security solutions for clients. Ideal candidates should have over 6 years of experience in relevant fields, expertise in Cyber Risk Management, and strong analytical skills. The firm offers a diverse and inclusive culture, continuous learning, and transformative leadership opportunities.

Benefits

Continuous learning opportunities

Flexible work arrangements

Transformative leadership coaching

Diverse and inclusive culture

Qualifications

• At least 6 years of relevant experience, preferably with 2 years in a consulting role.
• Excellent communication and interpersonal skills.
• Creative and independent with problem-solving skills.

Responsibilities

• Assess, design, build, and implement security solutions for clients.
• Conduct cyber risk assessments and determine appropriate controls.
• Monitor risk mitigations and manage exceptions.

Skills

Cyber Program Management

Cyber Threat Management

Identity & Access Management

Data Protection

Cloud Technical Risk Assessment

Threat Modelling

Project Management

Analytical Skills

Education

Recognized university degree in Computer Science or related field

Tools

SIEM (e.g., ArcSight)

Security Analytics (e.g., RSA)

Job description

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills.

Your Key Responsibilities

As a Cyber Risk Manager, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Experience in delivering multiple security projects and solutions across one or more of the following domains: Information Security domains: Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Security Operations, and Cyber Analytics. (This experience should include both advisory, implementation, and operation experience)
• Conduct cyber risk assessments in support of technology initiatives to help identify IT-related risks and determine appropriate controls to mitigate those risks.
• Monitor, track, and manage risk mitigations and exceptions, ensuring adequate monitoring capability is incorporated into solutions.
• Understand security concepts and how they apply to business and technology solutions
• Be able to articulate threats and risks to business and technology leaders
• Understand project management concepts and how they can be applied to security-related projects
• Strong technical security skills in assessment, design, implementation, architecture, and program/project delivery and work across various delivery models (Waterfall, Agile, DevOps)

To Qualify for the role, you must have:

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology, or equivalent
• At least 6 years of relevant experience, preferably with 2 years’ experience in a business consulting role in a leading consultancy firm
• Mandatory skills: Threat Modelling and Cloud Technical Risk Assessment knowledge
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal, and writing skills

Ideally, you’ll also have:

• Industry-related certification preferred (e.g., CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL)
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience
• Solution design of Threat & Vulnerability Management solutions such as implementation of SIEM (e.g., ArcSight), Incident Response (e.g., Resilient), & Security Analytics (e.g., RSA Security Analytics) within the context of a Security Operating Centre framework
• Familiarity with at least one of the following IAM technologies such as SailPoint, RSA Aveksa / VIA & Oracle (OIM, OIA)
• Possess a CISSP certification

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful
• impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader
• the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your
• voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

Apply now.