IT Security Consultant - Assurance
Core
Deliver technical security risk analysis and assurance activities across the firm's technology environment, including threat assessments, architecture reviews, and compliance coordination.
Role type
Mid-level IT Security Consultant (GRC & Risk)
Builds
Security risk reports, architecture review findings, audit evidence, and compliance status updates
Domain
Professional Services / IT Security / GRC
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
threat and risk assessment, security architecture review, penetration testing coordination, supply chain security review, compliance program management, executive reporting, internal audit execution
Preferred skills
cloud security expertise, ISO27001/SSAE16/APRA CPS234/ASD Essential 8 framework knowledge, CISSP/CISM/CISA certification
Technologies
Azure, M365, NIST RMF, STRIDE, OCTAVE
Responsibilities
Conduct threat and risk assessments for systems and AI solutions; Perform security architecture reviews; Coordinate penetration testing activities; Respond to client questionnaires and RFPs; Maintain security risk registers and compliance certifications; Run quarterly audits on access and assets
Seniority
Mid-level, hands-on IC
