Cybersecurity Lead Consultant

The Role We are looking for a Cybersecurity Lead Consultant to drive our Governance, Risk and Compliance (GRC) practice. This is a hands-on leadership role with three parts: winning new business through pre-sales consulting, delivering high-quality GRC engagements, and building the practice. You will lead a team of four consultants and act as a trusted advisor to clients. This includes serving as a virtual CISO (vCISO) for SMEs working towards recognised cybersecurity certifications, and helping us launch new AI governance and AI security services. Key Responsibilities Pre-Sales and Business Development •        Engage prospective clients to understand their business, risk profile and compliance needs, and shape tailored cybersecurity and AI governance solutions. •        Lead discovery sessions, presentations and workshops with stakeholders ranging from business owners to C-level executives. •        Prepare proposals, statements of work, effort estimates and pricing with the sales team. •        Respond to RFPs, RFQs and tenders, including technical and compliance sections. •        Identify upsell and cross-sell opportunities across the Genesis Networks service portfolio. Consulting and Service Delivery •        Act as vCISO for SME clients, guiding them through readiness assessments, gap remediation and certification audits. •        Deliver GRC engagements, including risk assessments, gap analyses, internal audits and compliance reviews. •        Lead ISO/IEC 27001 information security management system (ISMS) implementation and audit-readiness engagements. •        Lead ISO/IEC 42001 AI management system (AIMS) engagements, covering AI governance, AI risk and impact assessments, and certification readiness. •        Advise clients on securing their AI systems using ISO/IEC 27090 guidance, including AI-specific threats such as data poisoning, model manipulation and prompt injection. •        Develop security and AI policies, standards, procedures and incident response plans. •        Advise on alignment with frameworks and regulations such as NIST CSF, PDPA and MAS TRM. •        Present findings and practical recommendations to management and boards. •        Ensure engagements are delivered on time, within scope and to a high standard. Practice Development •        Shape and grow the GRC practice by defining service offerings, delivery methods, templates and toolkits. •        Build and launch our ISO/IEC42001 and ISO/IEC 27090 service lines, integrating them with existing ISO/IEC27001 offerings. •        Package repeatable, scalable services for the SME market. •        Track regulatory change, emerging threats and AI developments, and turn them into new service opportunities. •        Contribute thought leadership through webinars, workshops, articles and industry events. Team Leadership •        Lead, coach and mentor a team of four cybersecurity consultants. •        Plan and allocate resources across concurrent client engagements. •        Review team deliverables for quality, accuracy and consistency. •        Support the team's professional development, including upskilling in AI governance and security. Requirements •        Bachelor Degree in a related field. •        At least 4 years of cybersecurity experience, including at least 1 year in GRC, audit or advisory roles. •        Proven pre-sales or client-facing consulting experience, including proposal writing and solution scoping. •        Strong working knowledge of ISO/IEC 27001 and related frameworks such as NIST CSF and CIS Controls, plus local requirements such as PDPA and MAS TRM. •        Understanding of AI governance and AI risk concepts, with interest in building expertise in ISO/IEC 42001 andISO/IEC 27090. •        Experience leading or mentoring a team of consultants. •        Excellent communication and presentation skills, with the ability to explain technical risk in business terms. •        Commercial awareness and a business-development mindset.