Cyber Risk Analyst / Manager (CCP for ICT Professionals (Cybersecurity))

JobScope – Cyber Risk Analyst / Manager

TheCyber Risk Analyst / Manager is responsible for identifying, assessing, andmanaging cybersecurity risks to support clients in strengthening their securityposture, achieving regulatory compliance, and preparing for cybersecuritycertifications.

KeyResponsibilities

• Conduct cybersecurity risk assessments and maintain risk registers.
• Perform gap assessments against cybersecurity frameworks and regulatory requirements (e.g. Cyber Essentials, Cyber Trust, ISO/IEC 27001, DPTM, PDPA, MAS TRM).
• Review and assess the effectiveness of cybersecurity controls, including governance, asset management, access control, endpoint security, data protection, network security, backup, and incident response.
• Develop risk treatment plans and monitor remediation activities.
• Prepare professional reports, including risk assessments, gap analysis, remediation plans, and management presentations.
• Facilitate stakeholder interviews, workshops, and security assessment sessions.
• Evaluate third-party and cloud service provider cybersecurity risks.
• Provide cybersecurity governance and compliance advisory to clients.
• Support certification readiness, audits, and continuous improvement initiatives.
• Keep abreast of emerging cyber threats, industry best practices, and regulatory developments.

Key Deliverables

• Cyber Risk Assessment Report
• Cyber Risk Register
• Gap Analysis Report
• Remediation Plan
• Compliance & Certification Readiness Report
• Executive Risk Dashboard
• Security Improvement Roadmap