Cybersecurity GRC Consultant — Flexible, Global Impact

ERNST & YOUNG ADVISORY PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

EY Singapore is seeking motivated cybersecurity consultants to join our team, delivering independent assessments or implementations of cyber solutions for clients. You will work within engagement teams across the EY network to help clients strengthen security and resilience.

You will engage in security-by-design assessments, risk management, and the deployment of innovative security tools, collaborating with stakeholders to align with government policies and industry standards while advancing

Qualifications

• At least 4 years of experience in Cybersecurity, preferably within a public sector environment.
• Experience in maintaining security policies, procedures, and guidelines.
• Familiarity with Singapore Government security policies and standards.
• Familiarity with risk assessment methodologies and experience in conducting risk assessments.
• Experience in managing or supporting security audits and compliance reviews.
• CISSP or equivalent professional certification.
• Strong stakeholder management and interpersonal skills.

Responsibilities

• Conduct thorough assessments throughout security-by-design phases, ensuring security requirements are defined, designed, and implemented in the system lifecycle.
• Participate in scoping and review of ICT security tests, reviews, and audits to ensure security assurance is achieved.
• Analyse cybersecurity challenges and vulnerabilities for emerging technologies and develop risk mitigation plans.
• Assist in design, development, and support of security tools and technologies; test their effectiveness.
• Assess and provide guidance on security design, architecture, and standards; review enhancements.
• Review technical annexes and areas of responsibility to ensure cybersecurity requirements and policies are adhered to.
• Support stakeholders in remediation guidance and understanding risk-mitigating measures.
• Advise stakeholders to ensure secure lifecycle aligned with assessed risks and policies.
• Ensure key security requirements are defined and implemented per policies and guidelines.
• Review security architecture and designs to identify gaps and propose enhancements.
• Support scoping of security tests, reviews, and audits to achieve security assurance.
• Work with stakeholders to submit regular cyber security reports and drive awareness.

Skills

Communication

Curiosity

Integrity

Impact

Teamwork

Knowledgeable

Education

CISSP Certification

Job description

EY Singapore is seeking motivated cybersecurity consultants to join our team, delivering independent assessments or implementations of cyber solutions for clients. You will work within engagement teams across the EY network to help clients strengthen security and resilience.

You will engage in security-by-design assessments, risk management, and the deployment of innovative security tools, collaborating with stakeholders to align with government policies and industry standards while advancing