Cyber Security Consulting, Experienced Associate to - Singapore - KPMG - Singapore

KPMG - Singapore

Verified Company

Singapore

1 week ago

Posted by:

Wei Jie

beBee Recruiter

Description

**Job Description

-
Ethical Hacking:

-
Cybersecurity Risk & Governance:

- this discipline covers designing and implementing Cybersecurity frameworks; Cyber maturity assessments; organisational design for Cyber Security; Cloud security; design and rollout of cyber security processes such as Incident Management, Intrusion Detection, and Security Monitoring.
-
Technology Risk and 3rd Party Cyber Risk:

this discipline covers IT-Business related consulting over how an organisation manages technology risk and governs its outsourcing. This involves review, re-design and implementation controls over the 3rd party organisation's IT environment. Topics include system development, project management, business or IT outsourcing, business continuity management, information security, incident management, user access management.

-
Cyber Business Continuity, Disaster Recovery & Crisis Management:

this discipline covers building business and technology resilience against cyber-attacks. Creating and testing Cyber Incident Response Plans around typical cyber-attack scenarios. Taking regulatory requirements around BCM and Crisis management and international standards based consulting.

-
Governance Risk and Compliance (GRC) - This discipline covers implementation of IT solutions for use cases such as Access control, Process control, Risk management, Compliance Management, Third party vendor risk management. This discipline also covers the area such as Pre/Post implementation review for large IT projects.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports.

Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are desirable.

The role involves:

Identify and resolve complex issues and develop innovative solutions for high profile clients on a variety of local and international engagements
Actively identify and support business development opportunities which includes supporting the team with sales activities such as proposal writing and client presentations
Coach and develop team members as part of the firm's overall Performance Management process or on specific engagements
Degree in technology, engineering, or business studies with information systems major/minor along with deep interest in technology risk, security and IT governance will be considered
Minimum 3 years of consulting experience in IT risk assessment or IT security
Good knowledge on new developments in cyber services capabilities and industry knowledge
Good working knowledge of information security principles, techniques and standards
Professional certifications such as CISSP, CRISC, CISA, CISM, PMP or other relevant qualifications
Driven to learn new things and share knowledge with your clients and colleagues
Ability to travel on regional and international assignments (occasionally)
Strong analytical, problemsolving and interpersonal skills
Excellent written and oral communication skills with the ability to present ideas and results to technical and nontechnical audiences