Cybersecurity Lead Consultant

The Role

We are looking for a Cybersecurity Lead Consultant to drive our Governance, Risk and Compliance (GRC) practice. This is a hands-on leadership role with three parts: winning new business through pre-sales consulting, delivering high-quality GRC engagements, and building the practice.

You will lead a team of four consultants and act as a trusted advisor to clients. This includes serving as a virtual CISO (vCISO) for SMEs working towards recognised cybersecurity certifications, and helping us launch new AI governance and AI security services.

Key Responsibilities

Pre-Sales and Business Development

• Engage prospective clients to understand their business, risk profile and compliance needs, and shape tailored cybersecurity and AI governance solutions.

• Lead discovery sessions, presentations and workshops with stakeholders ranging from business owners to C-level executives.

• Prepare proposals, statements of work, effort estimates and pricing with the sales team.

• Respond to RFPs, RFQs and tenders, including technical and compliance sections.

• Identify upsell and cross-sell opportunities across the Genesis Networks service portfolio.

Consulting and Service Delivery

• Act as vCISO for SME clients, guiding them through readiness assessments, gap remediation and certification audits.

• Deliver GRC engagements, including risk assessments, gap analyses, internal audits and compliance reviews.

• Lead ISO/IEC 27001 information security management system (ISMS) implementation and audit-readiness engagements.

• Lead ISO/IEC 42001 AI management system (AIMS) engagements, covering AI governance, AI risk and impact assessments, and certification readiness.

• Advise clients on securing their AI systems using ISO/IEC 27090 guidance, including AI-specific threats such as data poisoning, model manipulation and prompt injection.

• Develop security and AI policies, standards, procedures and incident response plans.

• Advise on alignment with frameworks and regulations such as NIST CSF, PDPA and MAS TRM.

• Present findings and practical recommendations to management and boards.

• Ensure engagements are delivered on time, within scope and to a high standard.

Practice Development

• Shape and grow the GRC practice by defining service offerings, delivery methods, templates and toolkits.

• Build and launch our ISO/IEC42001 and ISO/IEC 27090 service lines, integrating them with existing ISO/IEC27001 offerings.

• Package repeatable, scalable services for the SME market.

• Track regulatory change, emerging threats and AI developments, and turn them into new service opportunities.

• Contribute thought leadership through webinars, workshops, articles and industry events.

Team Leadership

• Lead, coach and mentor a team of four cybersecurity consultants.

• Plan and allocate resources across concurrent client engagements.

• Review team deliverables for quality, accuracy and consistency.

• Support the team's professional development, including upskilling in AI governance and security.

Requirements

• Bachelor Degree in a related field.

• At least 4 years of cybersecurity experience, including at least 1 year in GRC, audit or advisory roles.

• Proven pre-sales or client-facing consulting experience, including proposal writing and solution scoping.

• Strong working knowledge of ISO/IEC 27001 and related frameworks such as NIST CSF and CIS Controls, plus local requirements such as PDPA and MAS TRM.

• Understanding of AI governance and AI risk concepts, with interest in building expertise in ISO/IEC 42001 andISO/IEC 27090.

• Experience leading or mentoring a team of consultants.

• Excellent communication and presentation skills, with the ability to explain technical risk in business terms.

• Commercial awareness and a business-development mindset.