IT Security Consultant

About the role

An experienced IT Security Officer is sought to oversee cybersecurity risk assessments, security architecture reviews and incident management across the client's IT systems, applications, infrastructure and cloud environments.

Key responsibilities

• Review system architectures, data flows, interfaces, APIs, internet-facing entry points and security controls to identify vulnerabilities and risks.
• Conduct cybersecurity risk assessments for new and existing systems, applications, infrastructure and cloud services.
• Perform security reviews and recommend controls to address identified risks and vulnerabilities.
• Manage cybersecurity incidents, including triage, investigation, containment, remediation, recovery and post-incident reviews.
• Run vulnerability assessments and coordinate remediation of identified issues.
• Strengthen application, infrastructure and cloud security in line with best practices and industry standards.
• Support cybersecurity governance, audits, security policies and compliance requirements.
• Work with internal stakeholders, technical teams and external vendors to implement and maintain security controls.

Required profile

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• Minimum 5 years of experience in IT security, cybersecurity risk management, application security or cloud security.
• Hands-on experience conducting risk assessments and security reviews.
• Experience in incident response, including investigation, containment, remediation and recovery.

Required skills

• Strong understanding of system architecture, application architecture, data flows, APIs, network security and cloud environments.
• Knowledge of application security, vulnerability management and security best practices.
• Familiarity with ISO 27001, NIST and OWASP; certifications such as CISSP, OSCP, CCSP, CRISC or AWS Security are preferred.