Cybersecurity Consultant

About This Role

This advanced consulting role focuses on assessing cybersecurity risks, control effectiveness, compliance posture, and cloud security across client environments. The primary objective is to independently plan and perform security assessments, identify control gaps and vulnerabilities, and provide clear, evidence-based recommendations for risk treatment and compliance outcomes.

Responsibilities

• Plan and conduct cybersecurity risk assessments across infrastructure, applications, and cloud environments
• Assess compliance against IM8 and other applicable security requirements using documented evidence and defined assessment criteria
• Perform vulnerability assessments and security configuration reviews, analyze findings, and validate risk and remediation priorities
• Support security audits by preparing assessment plans, reviewing evidence, documenting observations, and tracking findings to closure
• Review cloud security posture through CSPM findings and evaluate cloud security risks and control gaps
• Support incident management activities, including assessment of security impact, coordination of actions, and documentation of outcomes
• Coordinate vulnerability management activities, including review, prioritization, remediation tracking, and risk acceptance inputs
• Produce clear assessment reports that describe scope, evidence, findings, risk impact, and recommended corrective actions
• Maintain sufficient independence from personnel implementing the controls being assessed and highlight potential conflicts of interest
• Communicate assessment results and security risks to client stakeholders and relevant delivery teams
• Track assigned actions and deliverables to completion within agreed timelines and service requirements
• Contribute to knowledge sharing, assessment templates, and continuous improvement of cybersecurity consulting practices
• Perform any other related task as required

Requirements

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience)
• CISSP, CRISC, or equivalent certification
• 6+ years of overall relevant experience
• 5+ years of experience in Cybersecurity Consulting, Risk, Compliance, VA, and Cloud Security
• Demonstrated experience in security risk assessment, IM8/security compliance, VA, security configuration review, audit, CSPM, incident management, vulnerability management, and cloud security
• Demonstrated ability to perform assessments independently from personnel implementing the controls being assessed

Nice to have:

• CISA
• CGEIT
• AWS Certified Security -Specialty