Cybersecurity Consultant - GRC

Sia; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Sia in Singapore is seeking a Consultant for our Cybersecurity practice to help regulated clients in financial services demonstrate resilience to regulators, auditors and incidents. You will lead assessments, shape governance frameworks, and advise CISOs on cyber risk, including AI security and AI for Cyber, while growing the practice through proposals and client dialogues across APAC.

Join a dynamic team delivering Advisory services across MAS guidelines, ISO 27001 and NIST CSF, with

Qualifications

• 2 to 6 years proven experience in cybersecurity consulting, GRC, risk or audit.
• Knowledge of Singapore/APAC regulatory expectations on cyber and data protection across cloud and AI environments.
• Hands-on experience with risk assessments, control frameworks, audit and certification processes.
• Strong presentation and writing skills to engage CISOs, compliance leaders and technical teams.
• Everyday fluency with AI tools to speed up consulting workflows.
• Ability to work across APAC markets and learn quickly.
• Professional English, written and spoken.

Responsibilities

• Deliver independent cybersecurity assessments and compliance programmes for regulated clients.
• Lead cyber risk assessments to identify threats, vulnerabilities and remediation roadmaps.
• Design and implement cybersecurity strategies, policies, governance and assurance frameworks aligned with ISO 27001 and NIST CSF.
• Assess business continuity, disaster recovery and operational resilience against cyber incident scenarios.
• Support certification readiness and maintenance across APAC frameworks, including CSA Cyber Trust and ISO 27001.
• Advise executives on emerging technology risks and regulatory change, including AI security.

Skills

Cybersecurity consulting

GRC

Risk management

Audit

Job description

Sia Partners is a next-generation consulting firm focused on delivering superior value and tangible results to its clients as they navigate the digital revolution.With over 3,000 consultants in 17 countries, we will generate an annual turnover of USD 300 million for the current fiscal year.Our global footprint and our expertise in more than 30 sectors and services allow us to enhance our clients' businesses worldwide.

We guide their projects and initiatives in strategy, business transformation, IT & digital strategy, and Data Science. As the pioneer of Consulting 4.0, we develop consulting bots and integrate AI in our solutions.

In 2024 we announced our exciting partnership with Blackstone as our first financial investor since inception to support our company’s continued growth. We have also been ranked by Vault as a Top 20 Consulting Firm to work for in the APAC region for 2025.

Job Description

The role

As a Consultant in our Cybersecurity practice in Singapore, you will help highly regulated clients, mainly in financial services, show that their cyber and resilience posture stands up to regulators, auditors and real incidents. You will lead assessments, shape governance and assurance frameworks, and advise CISOs and executives on where cyber risk is heading, including AI security and AI for Cyber. You will also help grow the practice through proposals, thought leadership and client conversations.

What you will do

Deliver independent cybersecurity assessments, audits and compliance programmes for regulated clients, particularly against the MAS TRM Guidelines, MAS BCM Guidelines and MAS Notice on Cyber Hygiene.

Run cyber risk assessments to identify threats, vulnerabilities and control gaps, and turn findings into prioritised remediation roadmaps.

Design and implement cybersecurity strategies, policies, governance and assurance frameworks aligned with ISO 27001, NIST CSF, client requirements and regulatory obligations.

Assess business continuity, disaster recovery and operational resilience against cyber incident scenarios.

Support certification readiness and maintenance across APAC-relevant frameworks, including the CSA Cyber Trust mark and ISO 27001.

Advise technical and executive audiences on emerging technology risks and regulatory change, including AI security and AI for Cyber.

Growing Sia

Capture recurring themes from the market and client projects to improve our solutions.

Support business development: respond to RFPs, shape proposals, and identify and qualify opportunities.

Build Sia’s visibility through articles, client briefings and industry events.

Qualifications

2 to 6 years in cybersecurity consulting, GRC, risk or audit, with a record of client-facing delivery.

Working knowledge of Singapore and APAC regulatory expectations on cyber, technology risk, resilience and data protection across cloud and AI environments.

Hands-on experience with risk assessments, control frameworks, and audit and certification processes.

Strong presentation and writing skills, with the ability to engage CISOs, compliance leaders and technical teams.

Everyday fluency with AI tools to speed up consulting workflows.

Familiarity with BD activities such as RFPs, solution design and opportunity qualification.

Ability to work across teams and markets in APAC, and to learn quickly.

Professional English, written and spoken.

Additional Information

Joining Sia means:

• Working on high-impact engagements across a wide range of sectors (financial services, luxury, transport, retail & consumeretc.).
• Benefiting from a broad choice of data training courses and certifications, keeping your skills constantly up to date.
• Growing in a stimulating and dynamic professional environment, with engagements and internal R&D topics that add real value.
• Joining a company committed to the climate transition.
• Broadening your interests: through our cross-sector teams, you will be able to get involved in varied topics, from the environmental transition to generative AI.

Sia is an equal opportunity employer. All aspects of employment, such as recruitment, promotion, compensation and disciplinary action, are based solely on employees’ performance, skills and behaviour, or on business needs.

Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.