全职 Cybersecurity Lead Consultant 工作, 薪水 up to SGD 6,500, GENESIS NETWORKS PTE LTD Central Region (Singapore) 公司招聘中 - Ricebowl

The Role

We are looking for a Cybersecurity Lead Consultant to drive our Governance, Risk and Compliance (GRC) practice. This is a hands-on leadership role with three parts: winning new business through pre-sales consulting, delivering high-quality GRC engagements, and building the practice.

You will lead a team of four consultants and act as a trusted advisor to clients. This includes serving as a virtual CISO (vCISO) for SMEs working towards recognised cybersecurity certifications, and helping us launch new AI governance and AI security services.

Key Responsibilities

Pre-Sales and Business Development

•        Engage prospective clients to understand their business, risk profile and compliance needs, and shape tailored cybersecurity and AI governance solutions.

•        Lead discovery sessions, presentations and workshops with stakeholders ranging from business owners to C-level executives.

•        Prepare proposals, statements of work, effort estimates and pricing with the sales team.

•        Respond to RFPs, RFQs and tenders, including technical and compliance sections.

•        Identify upsell and cross-sell opportunities across the Genesis Networks service portfolio.

Consulting and Service Delivery

•        Act as vCISO for SME clients, guiding them through readiness assessments, gap remediation and certification audits.

•        Deliver GRC engagements, including risk assessments, gap analyses, internal audits and compliance reviews.

•        Lead ISO/IEC 27001 information security management system (ISMS) implementation and audit-readiness engagements.

•        Lead ISO/IEC 42001 AI management system (AIMS) engagements, covering AI governance, AI risk and impact assessments, and certification readiness.

•        Advise clients on securing their AI systems using ISO/IEC 27090 guidance, including AI-specific threats such as data poisoning, model manipulation and prompt injection.

•        Develop security and AI policies, standards, procedures and incident response plans.

•        Advise on alignment with frameworks and regulations such as NIST CSF, PDPA and MAS TRM.

•        Present findings and practical recommendations to management and boards.

•        Ensure engagements are delivered on time, within scope and to a high standard.

Practice Development

•        Shape and grow the GRC practice by defining service offerings, delivery methods, templates and toolkits.

•        Build and launch our ISO/IEC42001 and ISO/IEC 27090 service lines, integrating them with existing ISO/IEC27001 offerings.

•        Package repeatable, scalable services for the SME market.

•        Track regulatory change, emerging threats and AI developments, and turn them into new service opportunities.

•        Contribute thought leadership through webinars, workshops, articles and industry events.

Team Leadership

•        Lead, coach and mentor a team of four cybersecurity consultants.

•        Plan and allocate resources across concurrent client engagements.

•        Review team deliverables for quality, accuracy and consistency.

•        Support the team's professional development, including upskilling in AI governance and security.

Requirements

•        Bachelor Degree in a related field.

•        At least 4 years of cybersecurity experience, including at least 1 year in GRC, audit or advisory roles.

•        Proven pre-sales or client-facing consulting experience, including proposal writing and solution scoping.

•        Strong working knowledge of ISO/IEC 27001 and related frameworks such as NIST CSF and CIS Controls, plus local requirements such as PDPA and MAS TRM.

•        Understanding of AI governance and AI risk concepts, with interest in building expertise in ISO/IEC 42001 andISO/IEC 27090.

•        Experience leading or mentoring a team of consultants.

•        Excellent communication and presentation skills, with the ability to explain technical risk in business terms.

•        Commercial awareness and a business-development mindset.