Cybersecurity Lead Consultant

The Role

We are looking for a Cybersecurity Lead Consultant to drive our Governance, Risk and Compliance (GRC) practice. This is a hands-on leadership role with three parts: winning new business through pre-sales consulting, delivering high-quality GRC engagements, and building the practice.

You will lead a team of four consultants and act as a trusted advisor to clients. This includes serving as a virtual CISO (vCISO) for SMEs working towards recognised cybersecurity certifications, and helping us launch new AI governance and AI security services.

Key Responsibilities

Pre-Sales and Business Development

. Engage prospective clients to understand their business, risk profile and compliance needs, and shape tailored cybersecurity and AI governance solutions.

. Lead discovery sessions, presentations and workshops with stakeholders ranging from business owners to C-level executives.

. Prepare proposals, statements of work, effort estimates and pricing with the sales team.

. Respond to RFPs, RFQs and tenders, including technical and compliance sections.

. Identify upsell and cross-sell opportunities across the Genesis Networks service portfolio.

Consulting and Service Delivery

. Act as vCISO for SME clients, guiding them through readiness assessments, gap remediation and certification audits.

. Deliver GRC engagements, including risk assessments, gap analyses, internal audits and compliance reviews.

. Lead ISO/IEC 27001 information security management system (ISMS) implementation and audit-readiness engagements.

. Lead ISO/IEC 42001 AI management system (AIMS) engagements, covering AI governance, AI risk and impact assessments, and certification readiness.

. Advise clients on securing their AI systems using ISO/IEC 27090 guidance, including AI-specific threats such as data poisoning, model manipulation and prompt injection.

. Develop security and AI policies, standards, procedures and incident response plans.

. Advise on alignment with frameworks and regulations such as NIST CSF, PDPA and MAS TRM.

. Present findings and practical recommendations to management and boards.

. Ensure engagements are delivered on time, within scope and to a high standard.

Practice Development

. Shape and grow the GRC practice by defining service offerings, delivery methods, templates and toolkits.

. Build and launch our ISO/IEC42001 and ISO/IEC 27090 service lines, integrating them with existing ISO/IEC27001 offerings.

. Package repeatable, scalable services for the SME market.

. Track regulatory change, emerging threats and AI developments, and turn them into new service opportunities.

. Contribute thought leadership through webinars, workshops, articles and industry events.

Team Leadership

. Lead, coach and mentor a team of four cybersecurity consultants.

. Plan and allocate resources across concurrent client engagements.

. Review team deliverables for quality, accuracy and consistency.

. Support the team's professional development, including upskilling in AI governance and security.

Requirements

. Bachelor Degree in a related field.

. At least 4 years of cybersecurity experience, including at least 1 year in GRC, audit or advisory roles.

. Proven pre-sales or client-facing consulting experience, including proposal writing and solution scoping.

. Strong working knowledge of ISO/IEC 27001 and related frameworks such as NIST CSF and CIS Controls, plus local requirements such as PDPA and MAS TRM.

. Understanding of AI governance and AI risk concepts, with interest in building expertise in ISO/IEC 42001 andISO/IEC 27090.

. Experience leading or mentoring a team of consultants.

. Excellent communication and presentation skills, with the ability to explain technical risk in business terms.

. Commercial awareness and a business-development mindset.