Cybersecurity Associate Consultant (Cyber Audit)

Responsibilities: • Support Seniors and Consultants with onsite assessments, such as Cyber Trust Mark, MAS TRM, Cyber Hygiene notices/circulars, ISO 27001, ISO 42001. Maturity Assessment, Data Privacy advisory, Social Engineering exercises and NIST CSF engagements • Learn and manage client relationships and expectations with effective communication • Coordinate day-to-day operations with Seniors, Consultants and clients (i.e. schedule and participate in meetings; create agendas; develop document request lists; document walkthrough narratives, control designs and tests of operating effectiveness) • Assist Senior Consultants and Consultants with the preparation and review of draft reports • Assist with audit quality and assurance procedures • Utilise base knowledge of information security systems, risks and controls • Perform other administrative duties and assist with internal initiatives as assigned Requirements: • Bachelor’s degree or Diploma from an accredited institution in IT, cybersecurity, accounting, data analytics, information systems or a related field • Coursework, final-year projects, internships, CTF participation or self-directed study touching on information security, IT audit or a related field will be viewed favourably • Awareness of ISO 27001 / Cyber Trust Mark / MAS TRM / SOC / ISO 42001 / NIST — familiarity is welcome, but formal knowledge will be taught • Working knowledge of Windows OS, Linux and at least one cloud platform (AWS, GCP or Azure); exposure to SQL Server is an advantage • Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, the OSI model, defence-in-depth and common security elements • Excellent interpersonal, written and verbal communication skills • Strong time-management skills, with the ability to juggle multiple tasks and priorities • A self-starter with a solution-oriented mindset, comfortable in a fast-paced environment where goals are well-defined but formal procedures may be limited • A team player, receptive to feedback and coaching, passionate about the BDO mission, with an innovative mindset • Working toward, or intending to work toward, certifications such as CISA, CISSP, CISM, CRISC, CDPSE, CIPM, CIPT, CSX-F, PCI QSA or others related to information security, AI governance and audit