Ensign is hiring !
WeareseekingahighlyskilledandexperiencedSeniorCybersecurityConsultanttojoinourteam.Inthispivotalrole,asidefromdeliveringcybersecuritystrategyprojects,youwillalsoleadsimulationexerciseforbothtechnicalandleadershipteams.Inaddition,youwillworkwithyourmanagertoprovidestrategicguidance,expertadvice,andhands-onsupporttoseniorexecutivesbefore,during,andaftercyber-relatedincidents/crisis.
Responsibilities
- Performresearchandanalysisonregulationsandpoliciestodeterminealignmentandassistwiththedevelopment,implementationandtrackingoftheprogressofclients’objectiveswithsupportinggoaltargets.
- Developappropriatemethodologies,frameworksandapproachestoaddressprojectobjectives,drivetheclientstowardspositivebusinessresults,reinforcetheclients’strategicobjectives,achieveimprovementsineffectiveness,gainefficienciesandincreasedigitalmaturity.
- Influence,driveandsupporttheclientsintheircybersecuritytransformationjourneyswhilemaintainingalignmenttotheirbusinessobjectives.
- Curate,digestandutilisethelatestthreatintelligenceandtrendsandincorporatethisinformationintothedeliverables.
- Stayabreastofemergingcyberthreats,attacktechniques,andincidentresponsebestpractices,andshareinsightsandrecommendationswithclientstoenhancetheircybersecurityposture.
- Develop,implementandexercise,crisisresponseplansandplaybookstailoredtotheuniqueneedsandriskprofilesofourclients,ensuringreadinessandresilienceinthefaceofcyberthreats.
- Leadintheconductofsimulationexercises,post-incidentreviews,andotherrelatedtraining,toimproveourcustomersmaturitytodetect,respondandrecoverfromcyber-relatedincidents.Thisincludesthecraftingofreportsandpresentationmaterialtodeliverfindingstoourcustomers.
- Conductrapidassessmentsofcyberincidentstoappraisethescope,andpotentialimpactonourclients’operations,infrastructure,andsensitivedata.
- Providestrategiccounseltointernalandexternalstakeholdersoncriticaldecisionsintheeventofacyber-relatedcrisis,suchasresourceallocation,communicationstrategies,andstakeholderengagement,tominimizebusinessdisruptionandreputationaldamage.
- Contributetotheconductofpost-incidentreviewsandlessonslearnedsessionswithclients’leadershipteamstoidentifyareasforimprovementandenhancepreparednessforfuturecyber-relatedcrises.
Qualifications
- MinimallyaBachelor’sdegreeinComputerScience,InformationTechnology,orarelatedfield.
- Atleast7yearsofexperienceincybersecurity
- Hands-onexperiencemanagingreal-worldcyberincidentsand/orcrisissituations,andhavingdemonstratedtheabilitytoapplytechnicalandstrategicresponsemeasuresunderpressureispreferred.
- IndustrycertificationssuchasCISSP,CISA,CISM,GICSP,Cloud-relatedcertificationsorequivalentarehighlydesired.
PreferredSkills:
- Apassionforcybersecurityandacommitmenttocontinuouslearningandprofessionaldevelopment
- Abilitytodemonstrateflexibility,initiative,andinnovation
- Strongunderstandingofcybersecurityprinciples,technologies,andbestpractices,includingincidentdetection,response,andrecovery.
- FamiliarwithinternationalCybersecuritystandards,includingNISTCybersecurityFrameworkorotherrelevantframeworksandstandards.
- Familiarorkeeninresearch,technicalandbusinessdocumentation,andanalysis.
- FamiliarwithSingaporeGovernmentregulationsandpoliciesinrelationtoRiskManagementandCybersecurity.
- Familiarwithcrisismanagementapproachesandframeworks.
- Familiarwithdesigning,developinganddeliveringincidenttocrisismanagement,businesscontinuity,disasterrecoverysimulationexercises,especiallyinthecontextofcybersecurity.
- FamiliarwiththeMITREATT&CKFrameworkinsecurityoperations,threatIntelandwargaming.
- Applicantsselectedmaybesubjectedtosecurityscreeningandmayneedtomeeteligibilityrequirementsforaccesstoclassifiedinformation.