Senior Consultant- Cybersecurity

Infosys Singapore & Australia; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A leading cybersecurity services firm in Singapore is seeking a seasoned Cyber Security professional with 10-15 years of experience. The ideal candidate will possess a Bachelor’s degree in Computer Engineering and have a solid understanding of risk management, client relationships, and operational security. Professional certifications like CISA or CISSP are desirable. The role involves leading audits, ensuring compliance with industry standards, and promoting information security awareness among stakeholders.

Qualifications

• 10 - 15+ years of relevant experience in Cyber Security.
• Professional certifications like CISA, CISM, CRISC, or CISSP desirable.
• Good understanding of financial domain and Security IT.

Responsibilities

• Lead customer audit engagement and oversee all IT audit matters.
• Support security audit and assessment activities.
• Maintain technology policies and standards aligned with industry practices.
• Build and maintain client relationships and develop strategic vision.

Skills

Risk management

Client relationship management

Operational Security Reviews

Security Incident Management

ISO27k compliance

PCI DSS compliance

Education

Bachelor's degree in Computer Engineering

Tools

Cybersecurity frameworks (ISO, NIST, CSA)

PCI DSS

NIST

CSA

Job description

Key Responsibilities

• Candidate should have Bachelor's degree in Computer Engineering with 10 -15+ years of relevant experience in Cyber Security.
• Supports defining, enhancing, evolving, and demonstrating company’s point of view and delivery approach of cybersecurity-focused services.
• Should have experience handling Issue and Exception handling process and Risk management.
• Builds and maintains client relationships, developing a strategic vision for clients and internal teams.
• Candidate should have played GRC role for ISO27k, PCI DSS.
• Perform review of RCSA (Risk Control Self-Assessment) to ensure controls are designed and operating effectively.
• Maintain Technology Policies, Standards and Control Library; policies and standards are aligned with Customer’s adopted industry practices and standards (ISO, NIST, CSA).
• Lead customer audit engagement (internal and external) and oversight on all IT audit matters.
• Conduct reviews to ensure systems and processes comply with existing technology policies and standards.
• Hands‑on experience in Operational Security Reviews, Audits and Security Incident Management.
• Support Compliance Scanning, Management and Reporting.
• Support Security audit and assessment activities (e.g., data collection, supporting evidence and report generation) and review the third‑party support report.
• Effectively communicate risks and system issues to all stakeholders in advance to avoid program risks or escalation.
• Directly responsible for procedures and controls that assure compliance with regulatory, legal requirements and good business practices.
• Help ensure compliance with ISO27k, PCI and the NC Identity Theft law.
• Liaise with Internal & External Audit, Corporate Compliance and Risk.
• Ensure policies are reviewed and updated regularly.
• Promote and monitor the Information Security awareness program.
• Maintain expertise on security trends through training, research and development to mitigate potential security exposures.
• Good understanding of financial domain and Security IT.

Requirements

• Professional certification such as CISA, CISM, CRISC or CISSP is desirable.

Certifications and Domain Skills

• CISA, CISM, CRISC, or CISSP