Cyber Risk and Maturity Assessment Specialist

Kerry Consulting is currently partnering with a client to expand their Cyber Risk and Strategy team. This team plays a critical role in strengthening the organisation’s cybersecurity posture by assessing their current maturity, identifying gaps, and implementing robust strategies to achieve their desired security objectives. As part of business expansion, there are multiple roles available across different levels of seniority.
Responsibilities
You will drive transformative cybersecurity excellence by conducting assessments based on frameworks such as NIST CSF, ISO 27001, CIS, and MAS TRM. Evaluate the current security posture, identify gaps, and provide actionable recommendations, while shaping strategy through workshops with senior stakeholders. Design target operating models, roadmaps, and transformation plans, and advise on governance, risk, and compliance to meet regulatory expectations. Collaborate across teams to execute initiatives effectively, and track progress to deliver clear, measurable improvements to stakeholders.
Requirements
The ideal candidate should possess a degree in Information Security, Computer Science, or a related discipline, with 4-12 years of experience in cybersecurity consulting, risk management, or transformation initiatives, depending on seniority. They should demonstrate a strong understanding of leading cybersecurity frameworks such as NIST CSF, ISO 27001, COBIT, and CIS, with hands-on experience performing maturity assessments and gap analyses. Familiarity with regulatory guidelines, including MAS TRM, PDPA, and GDPR, will be advantageous. Excellent communication and stakeholder management skills are essential for engaging effectively across the organisation. Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, CRISC, or equivalent are highly desirable.
To apply
Please submit your resume to Grace Lim at gl@kerryconsulting.com, quoting the job title. We regret that only successful shortlisted candidates will be notified.
Registration No: R1988923
License No: 16S8060
![]()
