Cybersecurity Risk Consultant (Flexible, Global Team)

EY; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

EY Singapore is seeking a motivated Cybersecurity Consultant (Risk) to join Technology Consulting. You will deliver independent assessments and implement cyber solutions for clients, operating in a global EY network and acting as part of an international team.

You will work across security design, architecture, and governance, collaborating with stakeholders to drive risk-informed security programs and resilient outcomes.

Qualifications

• At least 1 year of experience in Cybersecurity.
• Experience in maintaining security policies, procedures, and guidelines.
• Familiarity with Singapore Government security policies and standards.
• Familiarity with risk assessment methodologies and conducting risk assessments.
• Experience in managing or supporting security audits and compliance reviews.
• Relevant cybersecurity professional qualifications such as CISSP or equivalent.

Responsibilities

• Conduct security assessments in security-by-design phases across the system lifecycle.
• Scope and review ICT security tests, reviews, and audits for security assurance.
• Analyze emerging technologies (5G, Quantum, IoT, AI) for risk and mitigation planning.
• Design, develop, and support new security tools and technologies with stakeholders.
• Review security architecture and standards, advise on enhancements and controls.
• Ensure compliance with policies and guidance in all deliverables.
• Provide guidance to remediate security risks and communicate risk posture.
• Submit regular cybersecurity scorecards and promote security awareness.

Skills

Communication

Knowledgeable

Curiosity

Integrity

Impact

Teamwork

Job description

EY Singapore is seeking a motivated Cybersecurity Consultant (Risk) to join Technology Consulting. You will deliver independent assessments and implement cyber solutions for clients, operating in a global EY network and acting as part of an international team.

You will work across security design, architecture, and governance, collaborating with stakeholders to drive risk-informed security programs and resilient outcomes.