Senior Information Security Consultant
Core
Designing and implementing information security policies, conducting risk assessments, and performing compliance audits against global standards.
Role type
Senior Information Security Consultant
Builds
Security policies, risk mitigation strategies, and compliance frameworks
Domain
Information Security / Cybersecurity / Compliance
Deliverable
client delivery
Required skills
Information Risk Management methodologies, Information Security Standards (ISO 27001, NIST, GDPR), IT audit, Application architecture design
Preferred skills
Sector-specific security requirements (AICPA, HIPAA, PCI/DSS), Application Security methods, Penetration Testing
Technologies
ISO 27005, NIST 800-30, ITSRM, CISSP, CISA, CISM, ISO 27001 LA
Responsibilities
Perform compliance assessments against ISO 27001, ISO 22301, PCI/DSS, SOC 2, GDPR, NIS 2, and DORA; Conduct Information Security Risk Assessments and propose countermeasures; Develop Information Security Policies and Procedures; Develop and review application architecture and design; Conduct IT and Security audits
Seniority
Senior, hands-on IC