Cybersecurity Risk Assessment Consultant

Ernst & Young Advisory Services Sdn Bhd; Singapore; On-site; SGD 120,000 - 170,000; Full time

Benefits offered by this job

Continuous learning

Flexible working arrangements

Transformative leadership

Diverse and inclusive culture

Job summary

Ernst & Young Advisory Services Sdn Bhd is seeking motivated cybersecurity consultants to join EY Singapore in providing independent assessments or implementation of cyber solutions. You will work with an international team on complex security matters, shaping client resilience across sectors.

Responsibilities span security-by-design assessments, security testing reviews, risk analysis of emerging tech, and integration of innovative controls.

Qualifications

• At least 4 years of experience in Cybersecurity, preferably within a public sector environment.
• Experience in maintaining security policies, procedures, and guidelines.
• Familiarity with Singapore Government security policies and standards.
• Familiarity with risk assessment methodologies and experience in conducting risk assessments.
• Experience in managing or supporting security audits and compliance reviews.
• Relevant cybersecurity professional qualifications such as CISSP or equivalent certification.
• Strong stakeholder management and interpersonal skills.

Responsibilities

• Conduct thorough assessments throughout security-by-design phases, ensuring security requirements are defined, designed, and implemented throughout the system lifecycle in line with security policies, standards, and guidelines.
• Participate in scoping and review of ICT security tests, reviews, and audits to ensure security assurance is achieved.
• Analyse cybersecurity challenges and vulnerabilities in emerging technologies (5G, Quantum, IoT, AI); assess risks and develop risk mitigation plans.
• Assist in design, development, and support of new security tools; test effectiveness and integrate security solutions into existing systems.
• Assess and provide guidance on security design, architecture, and standards; review enhancements and provide security considerations for policy development.
• Review technical annexes and areas of responsibility to ensure cybersecurity requirements and policies are followed.
• Support stakeholders in remediating security risks and understanding mitigating measures.
• Advise stakeholders to ensure a secure lifecycle aligned with risks and policies.
• Ensure key security requirements are defined and implemented per design and policies.
• Review security architecture, designs, and implementations for compliance with policies and standards.
• Identify design gaps and recommend enhancements.
• Support scoping of security tests and audits; review results to ensure assurance.
• Work with stakeholders to submit regular reports such as cybersecurity scorecards and drive awareness.

Skills

Communication

Knowledgeable

Curiosity

Integrity

Impact

Teamwork

Education

CISSP certification

Job description

Ernst & Young Advisory Services Sdn Bhd is seeking motivated cybersecurity consultants to join EY Singapore in providing independent assessments or implementation of cyber solutions. You will work with an international team on complex security matters, shaping client resilience across sectors.

Responsibilities span security-by-design assessments, security testing reviews, risk analysis of emerging tech, and integration of innovative controls.