Cybersecurity Risk & Assurance Specialist

VY SYSTEMS PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

VY SYSTEMS PTE. LTD. is seeking a cybersecurity consultant in Singapore with 4–6 years of experience to perform risk and maturity assessments, gap analyses against NIST CSF, ISO 27001 and CIS Controls, and regulatory reviews.

You will engage with enterprise clients, conduct interviews and workshops, document findings, and support cybersecurity roadmap delivery. The role requires strong analytical skills, report-writing, and the ability to explain technical concepts in business terms;

Qualifications

• Bachelor's degree in cybersecurity, information security, IT, CS or related field.
• Preferred certifications: CISM, CISSP, CRISC, CEH, GIAC, OSCP.
• 4–6 years of experience in cybersecurity, information security, IT risk, or cyber consulting.

Responsibilities

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls and regulatory requirements.
• Assess cybersecurity governance, policies, standards, regulations, and security controls.
• Support cybersecurity strategies, roadmaps, and improvement plans.
• Identify cybersecurity risks and recommend remediation measures.
• Conduct risk assessments, third-party risk assessments, and governance reviews.
• Lead stakeholder interviews, workshops, and assessment sessions.
• Document findings, risks, and recommendations; present results to client teams.
• Support project managers and engagement leads in cybersecurity program delivery.

Skills

Analytical thinking

Problem-solving

Report writing

Communication skills

Client-facing consulting

Teamwork

Education

Bachelor's degree in Cybersecurity/Information Security/IT/CS

Tools

NIST CSF

ISO 27001

CIS Controls

Third-Party Risk Management

Incident Response

Vulnerability Management

Red Teaming

Penetration Testing

Job description

Key Responsibilities

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, regulations, and security controls.
• Support cybersecurity strategies, roadmaps, and improvement plans.
• Identify cybersecurity risks and recommend practical remediation measures.
• Conduct cybersecurity risk assessments, third-party risk assessments, security maturity assessments, governance reviews, incident-response readiness assessments, and regulatory compliance reviews.
• Conduct stakeholder interviews, workshops, and assessment sessions.
• Document findings, risks, and recommendations.
• Present assessment results and remediation recommendations to client teams.
• Support project managers and engagement leads in cybersecurity program delivery.

Required Experience

• 4–6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
• Experience delivering cybersecurity assessments, audits, compliance, and advisory engagements.
• Strong understanding of information security principles, risk management, and security testing.
• Experience working with enterprise clients or large organizations.
• Ability to work independently and collaborate effectively with project teams.

Preferred Technical Skills

• Cybersecurity Risk Management
• Security Governance
• NIST Cybersecurity Framework (NIST CSF)
• ISO 27001
• Third-Party Risk Management
• Incident Response & Recovery
• Vulnerability Management
• Red Teaming
• Penetration Testing

Education & Certifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
• Preferred certifications: CISM, CISSP, CRISC, CEH, GIAC, or OSCP.

Key Competencies

• Strong analytical and problem-solving skills.
• Excellent report writing and documentation.
• Strong verbal and written communication.
• Client-facing consulting experience.
• Stakeholder management skills.
• Ability to explain technical concepts in business-friendly language.
• Strong attention to detail and teamwork.