GRC Cybersecurity Consultant: Risk, Audit & Secure Design

ERNST & YOUNG ADVISORY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Continuous learning

Flexible work

Inclusive culture

Job summary

EY Singapore is seeking motivated cybersecurity consultants to join our team of professionals. You will work on engagements providing independent assessments or implementation of cyber solutions for clients, contributing to business resilience on a global EY network.

Responsibilities include security-by-design assessments, scoping ICT security tests, risk analysis for emerging tech, and designing security controls.

Qualifications

• 4+ years of cybersecurity experience, preferably in public sector environments.
• Experience maintaining security policies, procedures and guidelines.
• Familiarity with Singapore Government security policies and standards.
• Familiarity with risk assessment methodologies and conducting risk assessments.
• Experience managing or supporting security audits and compliance reviews.
• Relevant cybersecurity qualifications such as CISSP or equivalent.
• Strong stakeholder management and interpersonal skills.

Responsibilities

• Conduct security assessments across design, development and lifecycle in line with ICT security policies.
• Review ICT security tests, reviews and audits to ensure security assurance.
• Analyse vulnerabilities with emerging technologies (5G, AI, IoT) and coordinate risk mitigation.
• Design and support new security tools and technologies and integrate them into systems.
• Review security architecture and provide guidance on enhancements and controls.
• Support remediation guidance and regular cybersecurity reporting to stakeholders.

Skills

Cybersecurity

Risk assessment

Security testing

Stakeholder mgmt

Communication

Education

CISSP or equivalent

Job description

EY Singapore is seeking motivated cybersecurity consultants to join our team of professionals. You will work on engagements providing independent assessments or implementation of cyber solutions for clients, contributing to business resilience on a global EY network.

Responsibilities include security-by-design assessments, scoping ICT security tests, risk analysis for emerging tech, and designing security controls.