Lead Consultant - Cybersecurity (GRC)

ACCESS PEOPLE (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

ACCESS PEOPLE (SINGAPORE) PTE. LTD. is seeking a Lead Consultant to join its Cyber Security Governance, Risk and Compliance team in Singapore.

The role involves developing and reviewing policies, translating regulatory obligations into governance processes, and delivering end-to-end engagements for clients in regulated industries and the public sector. You will map controls to ISO 27001, NIST CSF and local regulatory requirements, conduct risk and maturity assessments, and work with GRC

Qualifications

• Experience in cyber security governance, risk and compliance gained in consulting, advisory or in-house second line function.
• Demonstrable track record of authoring policies, standards, control frameworks and client-ready assessment deliverables.
• Working knowledge of ISO 27001 and NIST CSF with exposure to MAS TRM and Cyber Hygiene.
• Ability to translate regulatory requirements into testable controls and remediation sequencing.
• Hands-on experience with GRC platforms such as Archer, ServiceNow GRC or OneTrust.
• Experience conducting cyber risk and maturity assessments; exposure to IM8 and CCOP reviews is advantageous.
• Strong communication, facilitation skills for workshops and executive presentations.
• Certifications such as CISSP, CISM, CRISC, CISA or ISO 27001 Lead Auditor/Lead Implementer are advantageous. Reg No R1981018 EA Licence 14S7084

Responsibilities

• Develop, review and implement cybersecurity policies, standards and control frameworks for client organisations.
• Translate obligations into governance processes, control statements and operating procedures.
• Own engagement deliverables end to end, including current state assessments, risk registers and remediation roadmaps.
• Map controls across ISO 27001, NIST CSF and MAS TRM / Cyber Hygiene.
• Conduct cyber risk and maturity assessments, including CCOP reviews where applicable.
• Work with GRC platforms to operationalise control libraries and reporting.
• Facilitate workshops and executive presentations; manage stakeholders across engagements.
• Support quality review of junior colleagues' work.

Skills

Governance & compliance

Risk assessment

Policy development

ISO 27001

NIST CSF

Regulatory mapping

GRC platforms

Tools

Archer

ServiceNow GRC

OneTrust

Job description

On behalf of our client, an established technology consulting firm, we are seeking a Lead Consultant to join its Cyber Security Governance, Risk and Compliance team. The role covers policy and control framework development, regulatory mapping, risk and maturity assessments, and remediation planning for clients across regulated industries and the public sector.

Responsibilities

• Develop, review and implement cybersecurity policies, standards, procedures and control frameworks for client organisations.

• Translate regulatory and compliance obligations into practical governance processes, control statements and operating procedures that clients can adopt and evidence.

• Own engagement deliverables end to end, including current state assessments, control gap analyses, risk registers, remediation roadmaps and executive reporting.

• Map control sets across ISO 27001, NIST CSF and regional regulatory requirements such as MAS TRM and Cyber Hygiene, identifying overlaps, gaps and remediation priorities.

• Conduct cyber risk assessments, maturity assessments and compliance reviews, including IM8, CCOP and ISO aligned reviews.

• Work within GRC platforms such as Archer, ServiceNow GRC or OneTrust to operationalise control libraries, assessment workflows and reporting.

• Facilitate workshops, stakeholder interviews and executive presentations, articulating risk exposure and recommendations to both technical and business audiences.

• Manage multiple stakeholder groups across concurrent engagements and support quality review of junior colleagues' work.

Requirements

• Experience in cyber security governance, risk and compliance, gained in consulting, advisory or an in house second line function.

• Demonstrable track record of authoring policies, standards, control frameworks and client ready assessment deliverables, rather than executing audits alone.

• Working knowledge of ISO 27001 and NIST CSF, with practical exposure to regional regulatory requirements such as MAS TRM and Cyber Hygiene.

• Ability to interpret a regulatory requirement and express it as a specific, testable control, and to advise on remediation sequencing and priority.

• Hands on experience with at least one GRC platform such as Archer, ServiceNow GRC, OneTrust or a comparable solution.

• Experience conducting cyber risk assessments, maturity assessments and compliance reviews; exposure to IM8 and CCOP reviews is advantageous.

• Confident communication and facilitation skills across workshops, stakeholder interviews and executive level presentations.

• Relevant certifications such as CISSP, CISM, CRISC, CISA or ISO 27001 Lead Auditor / Lead Implementer are advantageous.
  

  Reg No R1981018 EA Licence 14S7084