- 2 KAKI BUKIT AVENUE 1 Central Region (Singapore) Singapore
Working Location
Job Description
Responsibilities
We are looking for a Cybersecurity Lead Consultant to drive our Governance, Risk and Compliance (GRC) practice. This is a hands-on leadership role with three parts: winning new business through pre-sales consulting, delivering high-quality GRC engagements, and building the practice.
You will lead a team of four consultants and act as a trusted advisor to clients. This includes serving as a virtual CISO (vCISO) for SMEs working towards recognised cybersecurity certifications, and helping us launch new AI governance and AI security services.
• Engage prospective clients to understand their business, risk profile and compliance needs, and shape tailored cybersecurity and AI governance solutions.
• Lead discovery sessions, presentations and workshops with stakeholders ranging from business owners to C-level executives.
• Prepare proposals, statements of work, effort estimates and pricing with the sales team.
• Respond to RFPs, RFQs and tenders, including technical and compliance sections.
• Identify upsell and cross-sell opportunities across the Genesis Networks service portfolio.
• Act as vCISO for SME clients, guiding them through readiness assessments, gap remediation and certification audits.
• Deliver GRC engagements, including risk assessments, gap analyses, internal audits and compliance reviews.
• Lead ISO/IEC 27001 information security management system (ISMS) implementation and audit-readiness engagements.
• Lead ISO/IEC 42001 AI management system (AIMS) engagements, covering AI governance, AI risk and impact assessments, and certification readiness.
• Advise clients on securing their AI systems using ISO/IEC 27090 guidance, including AI-specific threats such as data poisoning, model manipulation and prompt injection.
• Develop security and AI policies, standards, procedures and incident response plans.
• Advise on alignment with frameworks and regulations such as NIST CSF, PDPA and MAS TRM.
• Present findings and practical recommendations to management and boards.
• Ensure engagements are delivered on time, within scope and to a high standard.
• Shape and grow the GRC practice by defining service offerings, delivery methods, templates and toolkits.
• Build and launch our ISO/IEC42001 and ISO/IEC 27090 service lines, integrating them with existing ISO/IEC27001 offerings.
• Package repeatable, scalable services for the SME market.
• Track regulatory change, emerging threats and AI developments, and turn them into new service opportunities.
• Contribute thought leadership through webinars, workshops, articles and industry events.
• Lead, coach and mentor a team of four cybersecurity consultants.
• Plan and allocate resources across concurrent client engagements.
• Review team deliverables for quality, accuracy and consistency.
• Support the team's professional development, including upskilling in AI governance and security.
• Bachelor Degree in a related field.
• At least 4 years of cybersecurity experience, including at least 1 year in GRC, audit or advisory roles.
• Proven pre-sales or client-facing consulting experience, including proposal writing and solution scoping.
• Strong working knowledge of ISO/IEC 27001 and related frameworks such as NIST CSF and CIS Controls, plus local requirements such as PDPA and MAS TRM.
• Understanding of AI governance and AI risk concepts, with interest in building expertise in ISO/IEC 42001 andISO/IEC 27090.
• Experience leading or mentoring a team of consultants.
• Excellent communication and presentation skills, with the ability to explain technical risk in business terms.
• Commercial awareness and a business-development mindset.
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.