Security Consultant

Role & responsibilities

• Conduct cybersecurity assessments, security audits, vulnerability assessments and risk analyses to identify security gaps and recommend mitigation strategies.
• Evaluate existing IT infrastructure, applications, networks and cloud environments against security best practices and regulatory requirements.
• Develop and recommend security policies, standards, procedures and control frameworks aligned with ISO 27001, NIST, SOC 2 and PCI DSS.
• Perform security architecture reviews, threat modelling and risk assessments for enterprise systems and business applications.
• Assess security controls across network security, cloud security, identity and access management (IAM), endpoint security and application security.
• Support vulnerability management, penetration-testing coordination, remediation tracking and security improvement initiatives.
• Assist clients in implementing security solutions, governance frameworks, risk management processes and compliance controls.
• Investigate security incidents, analyze findings and provide recommendations to improve incident response and threat detection capabilities.
• Prepare security assessment reports, audit documentation, risk registers, remediation plans and executive-level presentations.
• Work closely with client stakeholders, IT teams, security engineers and management to deliver cybersecurity consulting engagements.
• Monitor emerging cyber threats, vulnerabilities, technologies and regulatory changes to provide up-to-date security recommendations.
• Support pre-sales activities, technical proposals, client workshops and security awareness initiatives, where required.

Preferred candidate profile

• Bachelors degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 5 to 10 years of experience in cybersecurity, information security, IT risk management, security auditing or consulting.
• Strong understanding of cybersecurity principles, security architecture, vulnerability management, risk assessment and security controls.
• Hands-on experience in one or more domains, such as cloud security, application security, network security, IAM, penetration testing or Governance, Risk and Compliance (GRC).
• Working knowledge of security frameworks and regulatory standards, including ISO 27001, NIST CSF, SOC 2, PCI DSS and GDPR, as applicable.
• Familiarity with security tools such as Nessus, Qualys, Burp Suite, Splunk, Microsoft Sentinel or equivalent platforms, depending on specialization.
• Understanding of cloud platforms, operating systems, networking, encryption, firewalls, endpoint protection and incident response.
• Relevant certifications such as CISSP, CISM, CEH, Security+, CISA, CCSP or ISO 27001 Lead Auditor are preferred, depending on the role.
• Strong analytical, problem-solving, report-writing and presentation skills, with the ability to translate technical security risks into business-oriented recommendations.
• Excellent client communication, stakeholder management, teamwork and project management skills.
• Ability to manage multiple consulting engagements, work independently and deliver security assessments and recommendations within agreed timelines.