Consultant - Information Security
Core
Conducting information security risk assessments, compliance certifications, and incident handling to support business and risk management leaders.
Role type
Information Security Consultant
Builds
Risk assessment trackers, sensitive information inventories, and compliance evidence for audits.
Domain
Information Security and Privacy Compliance
Deliverable
dashboards & analysis
Required skills
Risk assessment, contract review, incident handling, third-party risk management, regulatory compliance knowledge
Preferred skills
Security awareness program development, due diligence on subcontractors
Technologies
NIST, ISO 27001
Responsibilities
Conducting infosec risk and impact assessments, supporting compliance certification and client audits, handling security incidents and data breach investigations, maintaining risk assessment trackers, reviewing privacy contracts and exhibits, ensuring adherence to security regulations, supporting third-party risk management activities.
Seniority
Mid-Senior, hands-on IC