Cybersecurity Consultant (Risk Assessment), Technology Consulting

Ernst & Young LLP; Singapore; Sur place; SGD 110 000 - 160 000; Plein temps

Avantages offerts par ce poste

Continuous learning

Flexible work

Leadership coaching

Inclusive culture

Résumé du poste

EY Singapore is seeking a Cybersecurity Consultant (Risk Assessment) to join our Technology Consulting team. You will perform independent assessments and help implement cyber solutions for clients, contributing to business resilience in an international network.

You will work with stakeholders across engagements, applying security design principles, risk methodologies, and government standards to protect critical information assets while advancing EY's cybersecurity capabilities.

Qualifications

• At least 4 years of experience in Cybersecurity.
• Experience in maintaining security policies, procedures, and guidelines.
• Familiarity with Singapore Government security policies and standards.
• Familiarity with risk assessment methodologies and experience in conducting risk assessments.
• Experience in managing or supporting security audits and compliance reviews.
• CISSP or equivalent certification.

Responsabilités

• Conduct security assessments across design phases, ensuring security requirements are defined and implemented.
• Participate in scoping and review of ICT security tests, reviews, and audits.
• Analyze cybersecurity challenges with emerging technologies and develop risk mitigation plans.
• Assist in design, development, and support of security tools and technologies and integrate into processes.
• Review security architecture and provide guidance on design enhancements and controls.
• Support reporting and awareness initiatives, including cybersecurity scorecards.

Connaissances

Communication

Knowledgeable

Curiosity

Integrity

Impact

Teamwork

Formation

CISSP or equivalent certification

Description du poste

Cybersecurity Consultant (Risk Assessment), Technology Consulting

Location:

Other locations: Anywhere in Country

Requisition ID: 119381

At EY, we develop you with future-focused skills and equip you with world-class experiences. We empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.

We work together across our full spectrum of services and skills powered by technology and AI, so that business, people and the planet can thrive together.

We’re all in, are you?

Join EY and shape your future with confidence.

The opportunity

We are looking to hire motivated and driven cybersecurity consultants to join our team of cybersecurity professionals. As a cybersecurity professional in EY Singapore, you will have the chance to work in engagement teams serving our clients in providing independent assessments or implementation of cyber solutions. As EY Singapore is a member of the whole global EY network, you will be part of an international connected team of specialists helping our clients with their most complex cybersecurity needs and contributing toward their business resilience.

Your key responsibilities

• Conduct thorough assessments throughout security-by-design phases, ensuring security requirements are appropriately defined, designed, and implemented throughout the system lifecycle in line with recognised security design principles and applicable ICT security policies, standards, and guidelines.
• Participate in the scoping and review of ICT security tests, reviews, and audits to ensure security assurance is achieved.
• Analyse cybersecurity challenges and vulnerabilities associated with emerging technologies, including 5G, Quantum Computing, IoT, and AI, assess potential risks posed by their adoption, and develop and coordinate the execution of risk mitigation plans.
• Assist in the design, development, and support of solutions for new security tools and technologies, test their effectiveness in real-world scenarios, and work closely with stakeholders to integrate innovative security solutions into existing systems and processes.
• Assess, research, and provide guidance on security design, architecture, and standards, review and recommend enhancements to security architecture, and provide security considerations and controls for policy development.
• Review technical annexes and areas of responsibility to ensure that cybersecurity requirements and relevant policies are adhered to.
• Support stakeholders in providing guidance to remediate security risks and understanding recommended risk mitigating measures.
• Advise stakeholders and ensure a secure lifecycle that is aligned with assessed security risks, security requirements, and prevailing ICT security policies, standards, and guidelines.
• Ensure key security requirements are defined, designed, and implemented in accordance with security design and in compliance with ICT security policies, standards, and guidelines.
• Review security architecture, designs, and implementations to ensure compliance with prevailing ICT security policies and standards.
• Identify design gaps and recommend security enhancements.
• Support the scoping of security tests, reviews, and audits, and review the results to ensure security assurance is achieved.
• Work with stakeholders to ensure timely submission of regular reports such as cybersecurity scorecards, and assist in driving cybersecurity awareness initiatives across the organisation.

Skills And Attributes For Success

• Communication – Demonstrate that you listen and understand before responding
• Knowledgeable – Demonstrate deep technical capabilities and understanding of the client’s problems.
• Curiosity – Be proactive, learn fast and seek to identify issues that others might miss.
• Integrity – Conduct yourself as per EY’s values, and do not be afraid to admit mistakes.
• Impact – Consistently deliver exceptional quality work that positively impacts the projects that you are on.
• Teamwork – You seek to ensure that the team succeeds, rather than only yourself.

To qualify for the role you must have

• At least 4 years of experience in Cybersecurity, preferably within a public sector environment
• Experience in maintaining security policies, procedures, and guidelines.
• Familiarity with Singapore Government security policies and standards.
• Familiarity with risk assessment methodologies and experience in conducting risk assessments.
• Experience in managing or supporting security audits and compliance reviews.
• Relevant cybersecurity professional qualifications such as Certified Information Systems Security Professional (CISSP) or equivalent certification.
• Strong stakeholder management and interpersonal skills.

What We Offer

EY offers a competitive remuneration package where you’ll be rewarded for your individual and team performance. We are committed to being an inclusive employer and are happy to consider flexible working arrangements. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.