Ensign is hiring !
Responsibilities:
• Report to the Head of Cyber Strategy Consulting.
• Lead and deliver cybersecurity strategy consulting engagements such as Cybersecurity Maturity Assessments, advisory, business transformation, Framework and Policy reviews.
• Serve as a trusted advisor to senior client stakeholders (Board, C-suite, CIO/CISO, Risk leaders).
• Use a Threat-Informed Defence approach to contextualise and prioritise actionable cybersecurity strategies given the client’s business objectives and environment.
• Facilitate workshops and discussions to elicit stakeholder inputs using design-thinking approaches.
• Lead workstreams or small teams across multiple engagements, managing client expectations, ensuring high-quality and on-time delivery.
• Coach and mentor junior consultants, providing guidance on both technical and consulting skills.
• Drive service improvements and innovation by contributing to internal methodologies, accelerators, and intellectual capital.
• Contribute to thought leadership (e.g. whitepapers, public consultations, podcasts).
• Support proposal development, client pursuits, and account growth activities.
• Stay current on emerging cyber threats, regulations, and industry trends to inform client advice.
Requirements:
• Relevant cybersecurity certification, e.g. CISSP, CISM
• Bachelor’s degree in Information Security, Engineering, Computer Science, Information Systems, or relevant fields. Relevant Master’s degree will be a plus.
• Typically 6–10+ years of experience in cybersecurity, technology, or management consulting, with at least:
• 3+ years in a client-facing consulting or advisory role
• Demonstrated experience delivering cybersecurity strategy or technology transformation engagements
• Strong structured problem-solving and analytical skills.
• Excellent written and verbal communication, including the ability to communicate complex cyber topics to non-technical executives.
• Executive presence and confidence in engaging senior stakeholders.
• Keep abreast of business and technology trends and understand the implications to the clients.
• Comfortable working in ambiguous, fast-paced environments.
• Collaborative team player with a coaching mindset.
• Proficient in Microsoft Office suite and track record of developing high quality deliverables to clients.
• Applicants selected may be subjected to security screening and may need to meet eligibility requirements for access to classified information.
Preferred Skills /Qualities:
• Familiar with international regulations such as Cybersecurity Laws, Privacy Laws, and international cybersecurity standards, including NIST Cybersecurity Framework, NIST SP 800-53, IEC 62443, MITRE ATT&CK and/or ISO 27001.
• Experience working with or advising regulated industries (e.g. financial services, critical infrastructure, healthcare, public sector) is a plus.
• Experience engaging with regulators or internal risk/compliance functions is a plus.
• Familiarity with developing and implementing cybersecurity strategies, developing and delivering tabletop exercises and executive trainings are a plus.
• Experience in incident or crisis management is a plus.
• Business or native proficiency in languages other than English is a plus.
• Ability to travel 25% of the time.
Skills Required
- Relevant cybersecurity certification, e.g. CISSP, CISM
- Bachelor's degree in Information Security, Engineering, Computer Science, Information Systems, or relevant fields
- Typically 6-10+ years of experience in cybersecurity, technology, or management consulting, with at least 3+ years in a client-facing consulting or advisory role
- Demonstrated experience delivering cybersecurity strategy or technology transformation engagements
- Strong structured problem-solving and analytical skills
- Excellent written and verbal communication
- Executive presence and confidence in engaging senior stakeholders
- Comfortable working in ambiguous, fast-paced environments
- Collaborative team player with a coaching mindset
- Familiarity with international regulations such as Cybersecurity Laws and Privacy Laws
- Experience engaging with regulators or internal risk/compliance functions
What We Do
Ensign InfoSecurity is the largest pure-play end-to-end cybersecurity service provider in Asia. Headquartered in Singapore, Ensign offers bespoke solutions and services to address their clients’ cybersecurity needs. Their core competencies are in the provision of cybersecurity advisory and assurance services, architecture design and systems integration services, and managed security services for advanced threat detection, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity. Ensign has two decades of proven track record as a trusted and relevant service provider, serving clients from the public and private sectors in the Asia Pacific region
