Cybersecurity Associate Consultant (Cyber Audit)

Responsibilities:

• Support Seniors and Consultants with onsite assessments, such as Cyber Trust Mark, MAS TRM, Cyber Hygiene notices/circulars, ISO 27001, ISO 42001. Maturity Assessment, Data Privacy advisory, Social Engineering exercises and NIST CSF engagements

• Learn and manage client relationships and expectations with effective communication

• Coordinate day-to-day operations with Seniors, Consultants and clients (i.e. schedule and participate in meetings; create agendas; develop document request lists; document walkthrough narratives, control designs and tests of operating effectiveness)

• Assist Senior Consultants and Consultants with the preparation and review of draft reports

• Assist with audit quality and assurance procedures

• Utilise base knowledge of information security systems, risks and controls

• Perform other administrative duties and assist with internal initiatives as assigned

Requirements:

• Bachelor’s degree or Diploma from an accredited institution in IT, cybersecurity, accounting, data analytics, information systems or a related field

• Coursework, final-year projects, internships, CTF participation or self-directed study touching on information security, IT audit or a related field will be viewed favourably

• Awareness of ISO 27001 / Cyber Trust Mark / MAS TRM / SOC / ISO 42001 / NIST — familiarity is welcome, but formal knowledge will be taught

• Working knowledge of Windows OS, Linux and at least one cloud platform (AWS, GCP or Azure); exposure to SQL Server is an advantage

• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, the OSI model, defence-in-depth and common security elements

• Excellent interpersonal, written and verbal communication skills

• Strong time-management skills, with the ability to juggle multiple tasks and priorities

• A self-starter with a solution-oriented mindset, comfortable in a fast-paced environment where goals are well-defined but formal procedures may be limited

• A team player, receptive to feedback and coaching, passionate about the BDO mission, with an innovative mindset

• Working toward, or intending to work toward, certifications such as CISA, CISSP, CISM, CRISC, CDPSE, CIPM, CIPT, CSX-F, PCI QSA or others related to information security, AI governance and audit