Cybersecurity Risk & Assurance Specialist

1-FINITY CONSULTING PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

1-FINITY CONSULTING PTE. LTD.

in Singapore seeks a Cybersecurity Consultant/Senior Consultant to support advisory, risk, governance, and compliance engagements across clients in Singapore and the broader SEA region. The ideal candidate has 4-6 years in cybersecurity, information security, IT risk or cyber consulting, with certifications such as CISM, CISSP, CRISC, CEH, GIAC, or OSCP; a bachelor's degree is required.

Qualifications

• 4-6 years of Cybersecurity/InfoSec/IT Risk/Cyber Consulting experience.
• Experience delivering cybersecurity assessments, audits, compliance and advisory engagements.
• Strong understanding of information security principles, risk management and security testing.

Responsibilities

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, regulatory and control environments.
• Support development of cybersecurity strategies, roadmaps, and remediation plans.
• Identify cyber risks and recommend practical remediation measures.

Skills

Cybersecurity

Information Security

IT Risk

Technology Risk

Cyber Consulting

Education

Bachelor's degree in Cybersecurity/InfoSec/IT/CS

Tools

NIST CSF

ISO 27001

Job description

General Key Requirements:

Location: Singapore

Skills: Cybersecurity Professional

Certification: CISSP, CISM, CRISC, GIAC, OSCP, CEH

Domain: Aviation

Experience: 4-6 years

About the Role (6 months rolling contract)

We are looking for a motivated and client-focused Cybersecurity Consultant/ Senior Consultant to support the delivery of cybersecurity advisory, risk, governance, and compliance engagements across clients in Singapore and the broader SEA region.

The successful candidate will help organizations identify cyber risks, assess security controls, improve governance frameworks, and strengthen cyber resilience. This role provides an opportunity to work with senior client stakeholders while developing expertise across multiple cybersecurity domains.

Key Responsibilities

Cybersecurity Advisory & Assessment

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, regulatory and control environments.
• Support the development of cybersecurity strategies, roadmaps, and improvement plans.
• Identify cyber risks and recommend practical remediation measures.

Risk & Compliance

• Support delivery of:
  • Cybersecurity Risk Assessments
  • Third-Party Risk Assessments
  • Security Maturity Assessments
  • Security Governance Reviews
  • Incident Response Readiness Assessments
  • Regulatory Compliance Reviews
• Assist clients in meeting requirements related to:
  • NIST CSF
  • ISO 27001
  • MAS TRM Guidelines
  • Singapore PDPA
  • GDPR and other applicable regulations

Client Engagement

• Conduct stakeholder interviews, workshops, and assessment sessions.
• Document findings, risks, and recommendations in clear and concise reports.
• Present assessment outcomes and remediation recommendations to client teams.
• Support project managers and engagement leads in the delivery of cybersecurity programs.

Required Experience

• 4-6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
• Experience delivering cybersecurity assessments, Audit, Compliance and advisory engagements.
• Strong understanding of information security principles, risk management, and security testing.
• Experience working with enterprise clients or large organizations.
• Ability to manage work independently while collaborating effectively within project teams.

Preferred Technical Skills

• Cybersecurity Risk Management
• Security Governance
• NIST Cybersecurity Framework (NIST CSF)
• ISO 27001
• Third-Party Risk Management
• Incident Response and Recovery
• Vulnerability Management
• Red teaming exercises
• Penetration testing

Education

Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.

Preferred Certifications

• CISM
• CISSP (or pursuing)
• CRISC
• CEH
• GIAC
• OSCP

Key Competencies

• Strong analytical and problem-solving skills
• Excellent report writing and documentation abilities
• Effective verbal and written communication skills
• Client-facing consulting experience
• Stakeholder management and relationship-building skills
• Ability to translate technical concepts into business-friendly language
• Attention to detail and quality-focused delivery
• Strong teamwork and collaboration mindset

What Success Looks Like

• Delivers cybersecurity assessments and advisory engagements on time and with high quality.
• Builds trusted working relationships with client stakeholders.
• Produces actionable and practical cybersecurity recommendations.
• Contributes positively to project teams and client outcomes.
• Demonstrates continuous learning and growth in cybersecurity consulting.

Ideal Candidate

A cybersecurity professional with 4-6 years of experience who has hands-on exposure to cyber risk, governance, compliance, and assessment activities, and is looking to further develop their consulting and advisory skills within a fast-paced consulting environment.