Cyber Security Consultant

Arup; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Arup is seeking a senior cybersecurity specialist to safeguard digital systems and critical infrastructure across transport, utilities, energy, and communications sectors. You will lead risk assessments, develop strategies, and reinforce security across projects.

You will design and implement policies and assurance frameworks, review security architectures, support penetration testing, and advise project teams on threats and regulatory obligations within the built environment.

Qualifications

• Recognised relevant tertiary qualifications in Computer Science, Information Security or Operational Technology.
• At least 5 years of relevant cybersecurity domain experience.
• Knowledge of NIST CSF, ISO 27001, IEC 62443.
• Strong understanding of cybersecurity principles and emerging trends in the built environment.
• Familiarity with ICS/OT industry practices and technologies.
• Proficiency in risk assessments, vulnerability assessments, and penetration testing.
• Related cyber security certifications (CISSP, CISM, CCSP, IEC62443) preferred.

Responsibilities

• Conduct cyber security risk assessments to identify vulnerabilities, threats, and mitigation strategies across built environment and critical infrastructure projects.
• Develop and implement cyber security strategies, policies, and assurance frameworks aligned with industry standards, client requirements, and regulatory obligations.
• Review, design, and strengthen the security architecture of digital systems and networks, including supporting penetration testing, vulnerability assessments, and remediation activities.
• Evaluate business continuity, disaster recovery, and resilience measures to support effective response and recovery from cyber security incidents.
• Provide guidance and support to project teams and clients on cyber security best practices, emerging threats, and compliance requirements within the built environment sector.

Skills

Cybersecurity

Risk assessments

Threat modeling

Incident response

Regulatory compliance

Vulnerability assessments

Education

Relevant tertiary qualifications in Computer Science, Information Security or Operational Technology

Job description

Arup’s purpose, shared values and collaborative approach has set us apart for over 80 years, guiding how we shape a better world.

The focus of this role is to protect digital systems, infrastructure, and data within the built environment, particularly across essential infrastructure sectors such as transport, utilities, energy, and communications. The role is responsible for providing expert guidance and implementing robust cyber security measures to strengthen the resilience, integrity, and security of critical infrastructure. This includes supporting risk mitigation, raising security awareness, and developing effective response strategies to help safeguard essential services and the communities that rely on them

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas.

You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve.

The Opportunity

Conduct cyber security risk assessments to identify vulnerabilities, threats, and mitigation strategies across built environment and critical infrastructure projects.

Develop and implement cyber security strategies, policies, and assurance frameworks aligned with industry standards, client requirements, and regulatory obligations.

Review, design, and strengthen the security architecture of digital systems and networks, including supporting penetration testing, vulnerability assessments, and remediation activities.

Evaluate business continuity, disaster recovery, and resilience measures to support effective response and recovery from cyber security incidents.

Provide guidance and support to project teams and clients on cyber security best practices, emerging threats, and compliance requirements within the built environment sector.

Is this role right for you?

Recognised relevant tertiary qualifications in Computer Science, Information Security or Operational Technology and at least 5 years of relevant cybersecurity domain

Knowledge of relevant regulations and standards, such as NIST Cybersecurity Framework, ISO 27001, and IEC 62443.

Strong understanding of cyber security principles, best practices, and emerging trends in the built environment sector.

Familiarity with built environment (ICS\OT) industry practices and technologies

Proficiency in risk assessments, and understanding of vulnerability assessments, and penetration testing.

Related cyber security certifications (CISSP, CISM, CCSP, IEC62443) are preferred.

What we offer you

At Arup, we care about each member’s success, so we can grow together.

Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair, and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.

We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We welcome applications from individuals of all backgrounds, regardless of age (within legal limits), gender identity or expression, marital status, disability, neurotype or mental health, race or ethnicity, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.

Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Our internal employee networks support our inclusive culture: from race, ethnicity and cross-cultural working to gender equity and LGBTQ+ and disability inclusion – we aim to create a space for you to express yourself and make a positive difference. Discover more about life at Arup at www.arup.com/careers/your-life-at-arup .

We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

Arup does not accept unsolicited resumes from recruiters or employment agencies.