Cyber Security Consultant

Infosys Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Infosys Consulting in Singapore is seeking a Cybersecurity Consultant/Senior Consultant to support advisory, risk, governance and compliance engagements across clients in Singapore and the broader SEA region.

You will help organizations identify cyber risks, assess controls, strengthen governance, and improve cyber resilience, while working with senior client stakeholders and developing expertise across multiple domains.

Qualifications

• 5-10 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
• Experience delivering cybersecurity assessments and advisory engagements.
• Strong understanding of information security principles, risk management, and security controls.
• Experience working with enterprise clients or large organizations.
• Ability to manage work independently while collaborating effectively within project teams.

Responsibilities

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, and control environments.
• Support delivery of cybersecurity programs, including risk assessments and governance reviews.
• Document findings and present remediation recommendations to client teams.
• Engage with stakeholders through interviews and workshops.

Skills

Cybersecurity Risk Management

Security Governance

NIST CSF

ISO 27001

Third-Party Risk Management

IAM

Incident Response

Security Policies & Standards

Cloud Security Fundamentals

Data Protection & Privacy

Vulnerability & Risk Management

Education

Bachelor's degree in Cybersecurity or Information Security or related field

Job description

Practice: Cybersecurity Consulting

Experience: 5-10 Years

Employment Type: Full-Time

About the Role

We are looking for a motivated and client-focused Cybersecurity Consultant/ Senior Consultant to support the delivery of cybersecurity advisory, risk, governance, and compliance engagements across clients in Singapore and the broader SEA region.

The successful candidate will help organizations identify cyber risks, assess security controls, improve governance frameworks, and strengthen cyber resilience. This role provides an opportunity to work with senior client stakeholders while developing expertise across multiple cybersecurity domains.

Key Responsibilities

Cybersecurity Advisory & Assessment

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, and control environments.
• Support the development of cybersecurity strategies, roadmaps, and improvement plans.
• Identify cyber risks and recommend practical remediation measures.
• Support delivery of:
• Cybersecurity Risk Assessments
• Third-Party Risk Assessments
• Security Maturity Assessments
• Security Governance Reviews
• Incident Response Readiness Assessments
• Regulatory Compliance Reviews
• Assist clients in meeting requirements related to:
• NIST CSF
• ISO 27001
• MAS TRM Guidelines
• GDPR and other applicable regulations

Client Engagement

• Conduct stakeholder interviews, workshops, and assessment sessions.
• Document findings, risks, and recommendations in clear and concise reports.
• Present assessment outcomes and remediation recommendations to client teams.
• Support project managers and engagement leads in the delivery of cybersecurity programs.

Practice Development

• Contribute to knowledge management, methodologies, and reusable assets.
• Stay current on cybersecurity trends, emerging threats, and regulatory developments.
• Support proposal development, research, and thought leadership initiatives as required.

Required Experience

• 5-10 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
• Experience delivering cybersecurity assessments and advisory engagements.
• Strong understanding of information security principles, risk management, and security controls.
• Experience working with enterprise clients or large organizations.
• Ability to manage work independently while collaborating effectively within project teams.

Preferred Technical Skills

Experience in several of the following areas:

• Cybersecurity Risk Management
• Security Governance
• NIST Cybersecurity Framework (NIST CSF)
• ISO 27001
• Third-Party Risk Management
• Identity & Access Management (IAM)
• Incident Response and Recovery
• Security Awareness Programs
• Cybersecurity Policies and Standards
• Cloud Security Fundamentals
• Data Protection and Privacy
• Vulnerability and Risk Management

Education & Certifications

Education

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.

Preferred Certifications

• CISA
• CISM
• CISSP (or pursuing)
• CRISC
• Security+
• Cloud Security Certifications (AWS, Azure, GCP)
• Strong analytical and problem-solving skills
• Excellent report writing and documentation abilities
• Effective verbal and written communication skills
• Client-facing consulting experience
• Stakeholder management and relationship-building skills
• Ability to translate technical concepts into business-friendly language
• Attention to detail and quality-focused delivery
• Strong teamwork and collaboration mindset

What Success Looks Like

• Delivers cybersecurity assessments and advisory engagements on time and with high quality.
• Builds trusted working relationships with client stakeholders.
• Produces actionable and practical cybersecurity recommendations.
• Contributes positively to project teams and client outcomes.
• Demonstrates continuous learning and growth in cybersecurity consulting.

Ideal Candidate

A cybersecurity professional with 5-10 years of experience who has hands-on exposure to cyber risk, governance, compliance, and assessment activities, and is looking to further develop their consulting and advisory skills within a fast-paced consulting environment.