Senior Associate Security Consultant, GRC

Role Overview

• Responsible for developing expertise in their area of specialization.
• Translating clients’ cybersecurity requirements and customizing and implementing security solutions into specific systems, applications and product designs.
• Identifying and developing the security solutions for clients using company products, outsourced technology solutions and technical tools.
• Consulting with clients regarding secure product configuration, deployment, and security patches to minimize security vulnerabilities.
• Providing comprehensive scanning, penetration testing, vulnerability assessments, monitoring services and source code analysis and delivering detailed results to clients.
• Guiding and supporting clients in the development and implementation of product security controls.
• Conducting security assessments, vulnerability scans, and penetration tests to identify weaknesses in client systems.
• Analyzing security data, logs, and reports to detect and investigate security incidents or anomalies.
• Preparing and maintaining documentation, including security assessment reports, findings, and recommendations.
• Collaborating with senior consultants to provide advice and support to clients on security best practices and risk mitigation strategies.
• Learning and using various security tools and technologies for assessments and monitoring.
• Staying updated on the latest cybersecurity threats, vulnerabilities, and industry best practices.
• Assisting in evaluating client systems for compliance with industry standards (e.g., ISO 27001, NIST) and regulatory requirements.
• Communicating effectively with clients to understand their security needs and concerns.
• Participating in training programs and certifications to develop expertise in cybersecurity.

Requirements

• Strong interest in cybersecurity and a desire to learn and grow in the field.
• Knowledge of basic cybersecurity concepts, principles, and best practices.
• Familiarity with common security tools and technologies is a plus.
• Excellent analytical and problem-solving skills.
• Effective communication skills, both written and verbal.
• Ability to work collaboratively in a team environment.
• Eagerness to stay up to date with the evolving cybersecurity landscape.
• Bachelor's degree or equivalent in Information Technology or Computer Science or Engineering or related field.
• Industry relevant certifications such as CISSP, CISM, CEH, GSEC or CompTIA Security+ essential.
• Moderate level of demonstrable experience in the Information Technology Security Industry or relevant experience in similar role within a related environment.
• Moderate level of experience with security architecture design principles.
• Moderate level of experience with industry compliance and standards such as ISO 27000, PCI:DSS, NIST, HIPAA or others.
• Moderate level of experience with security tools and techniques to cover SANS Top 25, OWASP or others.

Tech Stack

• Cyber Security

Benefits

• Diversity and inclusion
• Professional development opportunities