Ensign is hiring !

Client Success Consultant, Cybersecurity Engagements

Job Overview

The Client Success Consultant owns the end-to-end management of client engagements across our cybersecurity delivery portfolios, including security testing and CISO / GRC advisory engagements. You are the client's primary point of contact through delivery: you manage timelines, resources and expectations, and you make sure engagements are managed properly both externally with clients and internally with the operational teams.

A background in Governance, Risk and Compliance (GRC) is not required for this role, but it is a strong plus. Candidates with GRC experience will have the opportunity to contribute directly to advisory delivery alongside our consultants, and this forms a natural growth path within the role.

We expect this role to make extensive, responsible use of AI-assisted tooling to accelerate documentation, reporting, engagement administration and other areas, so that your time is concentrated on client relationships and delivery quality rather than manual or repetitive work.

Responsibilities

• Manage the timeline and resources for client engagements across security testing and CISO / GRC delivery portfolios.

• Prepare and conduct project kick-off meetings, steering updates, status reporting and engagement closure.

• Own and manage delivery to clients' expectations while maintaining positive client rapport and long-term relationships.

• Provide advice and workarounds to deconflict and resolve client-consultant challenges during project delivery.

• Present the overall project management plan and resource utilisation to internal and client management.

• Work with Sales, Presales and Security Consultants to ensure a seamless end-to-end pre-sales to delivery workflow, including supporting proposals and client presentations.

• Coordinate between our consultants and clients' operational and implementation teams to keep remediation and implementation activities on track.

• Develop and continuously improve internal delivery processes – including the adoption of AI-assisted tooling – to enable delivery operations to scale.

• Keep abreast of industry and competitor trends to help sharpen the value proposition of our service offerings.

Additional Scope for Candidates with GRC Experience (Bonus, Not Required)

• Contribute to the development, evaluation and maintenance of client cybersecurity policies, procedures and standards aligned to frameworks such as ISO/IEC 27001 and NIST.

• Help translate audit findings and risk assessment outcomes into practical, prioritised remediation actions that clients' operational teams can realistically implement.

• Support risk assessments, cybersecurity programme assessments and remediation tracking alongside our GRC consultants.

• Support clients in preparing for and attaining Singapore certification and trust marks such as CSA’s Cyber Essentials and Cyber Trust, and IMDA’s Data Protection Essentials (DPE) and Data Protection Trustmark (DPTM).

Requirements

• Minimum 2 years of work experience, with experience in project, engagement or client management, ideally within cybersecurity, IT services or technology consulting.

• Ability to translate technical requirements and terminology for non-technical client stakeholders, with a high level of personal integrity.

• Strong prioritisation skills and the ability to work under pressure across multiple concurrent engagements with tight timelines.

• Strong presentation, negotiation and planning skills; self-motivated with strong interpersonal skills and an entrepreneurial mindset.

• Comfortable and effective in using AI-assisted productivity tools for drafting, reporting and analysis, with sound judgement on data confidentiality when doing so.

Preferred Skills / Qualities (Bonus, Not Mandatory)

• Working knowledge of GRC frameworks such as ISO/IEC 27001 and NIST, and/or hands-on experience in a GRC, CISO office or security assessment role.

• Relevant certifications such as CISSP, CISM, CISA, CRISC, CREST, CEH or OSCP; project management certifications such as PMP or PRINCE2.

• Familiarity with Singapore cybersecurity regulations and industry-specific standards (e.g. PDPA, Health Information Act, MAS Technology Risk Management Guidelines, CSA codes of practice).

• Familiarity with Singapore certification and trust-mark schemes, including CSA’s Cyber Essentials and Cyber Trust marks, and IMDA’s Data Protection Essentials (DPE) and Data Protection Trustmark (DPTM).

• Experience working with Singapore Government agencies or ministries.

• Strong client engagement skills.