GRC Consultant - Information Security

About the Role:

We are seeking a highly motivated and results-oriented Information Security Consultant to join our growing team. In this critical role, you will be responsible for delivering high-quality security solutions to our clients, enabling them to effectively mitigate cyber risks and enhance their overall security posture.

Key Responsibilities:

Lead & Deliver Security Engagements:

• Independently lead and execute comprehensive security assessments and audits, adhering to established methodologies and best practices.
• Collaborate effectively within cross-functional project teams, providing expert security guidance and driving successful project outcomes.

Provide Expert Security Guidance:

• Advise clients on the implementation and maintenance of robust Information Security Management Systems (ISMS), ensuring alignment with international standards such as ISO 27001.
• Develop and implement comprehensive Business Continuity and Disaster Recovery plans to minimize the impact of potential disruptions.
• Proactively identify, assess, and mitigate a wide range of information security risks and vulnerabilities across all areas of the client's business.

Develop & Deliver Security Solutions:

• Translate complex security concepts into clear, concise, and actionable recommendations for clients, facilitating informed decision-making.
• Develop and deliver impactful security awareness training programs to enhance employee understanding and promote a strong security culture.
• Create high-quality deliverables, including detailed reports, engaging presentations, and well-structured proposals.

Business Development & Growth:

• Gain in-depth knowledge of client business needs and industry trends to identify new opportunities and expand service offerings.
• Contribute to the development of compelling proposals and presentations to effectively communicate value propositions to prospective clients.
• Build and maintain strong, long-term relationships with clients through exceptional service delivery and proactive communication.

Professional Development:

• Continuously expand your knowledge of the evolving cybersecurity threat landscape, emerging technologies, and industry best practices through ongoing professional development activities.
• Develop expertise in at least one specific industry sector to become a recognized subject matter expert.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 3 years of hands-on experience in Information Security roles, including security assessments, audits, consulting, or a combination thereof.
• Possess at least one of the following industry-recognized certifications: CISSP, CISM, CISA, CRISC, CCSP, ISO 27001 Lead Auditor.
• Strong understanding of internationally recognized security frameworks and standards, including ISO 27001, NIST Cybersecurity Framework, and relevant industry regulations.
• Proven ability to analyze complex security issues, identify root causes, and recommend effective, cost-justified solutions.

Skills & Competencies:

Technical Expertise:

• Deep understanding of security concepts, technologies, and tools (e.g., firewalls, intrusion detection systems, encryption, vulnerability scanning).
• Experience with a variety of security assessment methodologies and tools.

Communication & Interpersonal Skills:

• Excellent written and verbal communication, presentation, and interpersonal skills.
• Ability to clearly articulate complex technical information to both technical and non-technical audiences in a concise and engaging manner.

Project Management:

• Proven ability to effectively manage multiple projects simultaneously, prioritize tasks, and consistently meet deadlines.
• Strong analytical and problem-solving skills with the ability to effectively troubleshoot and resolve security challenges.

Client Focus:

• Strong customer service orientation with a focus on building and maintaining long-term, mutually beneficial client relationships.

Personal Attributes:

• Highly motivated, results-oriented, and a strong team player with a positive and collaborative work ethic.
• A continuous learner with a passion for staying abreast of the latest cybersecurity trends and advancements.

Benefits:

• Competitive salary and comprehensive benefits package.
• Opportunities for professional growth and development, including access to training and mentorship programs.
• Work with a dynamic, supportive, and collaborative team of experienced professionals.
• Challenging and rewarding work environment with the opportunity to make a significant impact.