About This Role
This advanced consulting role focuses on assessing cybersecurity risks, control effectiveness, compliance posture, and cloud security across client environments. The primary objective is to independently plan and perform security assessments, identify control gaps and vulnerabilities, and provide clear, evidence-based recommendations for risk treatment and compliance outcomes.
Responsibilities
- Plan and conduct cybersecurity risk assessments across infrastructure, applications, and cloud environments
- Assess compliance against IM8 and other applicable security requirements using documented evidence and defined assessment criteria
- Perform vulnerability assessments and security configuration reviews, analyze findings, and validate risk and remediation priorities
- Support security audits by preparing assessment plans, reviewing evidence, documenting observations, and tracking findings to closure
- Review cloud security posture through CSPM findings and evaluate cloud security risks and control gaps
- Support incident management activities, including assessment of security impact, coordination of actions, and documentation of outcomes
- Coordinate vulnerability management activities, including review, prioritization, remediation tracking, and risk acceptance inputs
- Produce clear assessment reports that describe scope, evidence, findings, risk impact, and recommended corrective actions
- Maintain sufficient independence from personnel implementing the controls being assessed and highlight potential conflicts of interest
- Communicate assessment results and security risks to client stakeholders and relevant delivery teams
- Track assigned actions and deliverables to completion within agreed timelines and service requirements
- Contribute to knowledge sharing, assessment templates, and continuous improvement of cybersecurity consulting practices
- Perform any other related task as required
Requirements
- Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience)
- CISSP, CRISC, or equivalent certification
- 6+ years of overall relevant experience
- 5+ years of experience in Cybersecurity Consulting, Risk, Compliance, VA, and Cloud Security
- Demonstrated experience in security risk assessment, IM8/security compliance, VA, security configuration review, audit, CSPM, incident management, vulnerability management, and cloud security
- Demonstrated ability to perform assessments independently from personnel implementing the controls being assessed
Nice to have:
- CISA
- CGEIT
- AWS Certified Security -Specialty
Important Details
- Team: The consultant must be sufficiently independent from personnel implementing the controls being assessed
About the Company
Infinite Computer Solutions is a global service provider of Application Management, Infrastructure Management, Product Engineering, and Mobility and Messaging Products and Solutions. The company focuses on Telecom, Energy & Utilities, Media & Content, Healthcare, and Banking & Finance industries. With a global headcount of around 5000 professionals, Infinite Computer Solutions has offices spread across India, US, UK, China, Malaysia, Singapore, and Hong Kong, including delivery centers in the US at Maryland, Illinois, and Tennessee, and in India at Bangalore, Delhi, Hyderabad, and Chennai.
