Cybersecurity Auditor (DSC/JH)

ST ENGINEERING INFO-SECURITY PTE. LTD.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A leading cybersecurity firm in Singapore is seeking experienced Cybersecurity Professionals to support cybersecurity audits, risk assessments, and governance in the IT/OT sector. The ideal candidate will possess a CISA certification and have 3-5 years of experience in IT security audit and compliance. Responsibilities include planning audits, performing gap analyses, and engaging in pre-sales consultancy. This role is essential for enhancing critical systems controls and ensuring data security management in client environments.

Qualifications

• Minimum 3-5 years of cybersecurity experience in IT/OT security audit, review, advisory, governance, risk and compliance.

Responsibilities

• Support the planning and implementation of cybersecurity audit engagements.
• Perform gap analysis and cyber governance assessment against policies/standards.
• Provide advisory and recommendation with mitigation measures.
• Review cybersecurity frameworks and prepare reports.
• Engage in Pre-Sales consultancy and deliver business proposals.

Skills

Cybersecurity Audit

Risk Assessment

Governance

CISA Certification

Cybersecurity Compliance

Education

Certified Information Systems Auditor (CISA)

Cybersecurity Certifications (CRISC, CISM, CISSP)

Job description

We are looking for Cybersecurity Professionals who are passionate and experienced in the area of cybersecurity audit, cybersecurity Risk Assessment and Governance in the IT/OT space.

Responsibilities

• Provide professional services in one (or more) of the following in customer environments:
  • Cybersecurity Audit: Support the planning and implementation of cybersecurity audit engagements by coordinating with clients, gathering audit evidence, and delivering clear reports with actionable recommendations. Cybersecurity Security-by-Design
  • Cybersecurity governance and risk assessment
  • IT/OT critical systems controls analysis
  • Cyber maturity of IT security programmes
  • Data security management
• As part of professional services:
  1. Perform gap analysis and cyber governance assessment against policies/standards such as CCOP, CP8, IM8, NIST, ISO, IEC62443 etc
  2. Provide advisory and recommendation with mitigation measures
  3. Assist in measuring the effectiveness of cybersecurity and privacy programmes
  4. Review cybersecurity frameworks, information/cyber security policies, processes or procedures.
  5. Prepare and present reports to customer
• Engage in Pre-Sales consultancy, including delivering business proposals and presentations
• Lead and manage projects when required

Requirements

• Possession of the Certified Information Systems Auditor (CISA) certification, or successful completion of the CISA exam
• Cybersecurity certifications such as CRISC, CISM, CISSP, etc.
• Minimum 3-5 years of cybersecurity experience in IT/OT security audit, review, advisory, governance, risk and compliance.

Work location: Jurong East