Security Consultant – Cybersecurity & GRC Specialist

About the role

We are looking for an experienced Security Consultant to help public‑sector clients strengthen their cybersecurity posture. The role involves conducting assessments, audits and risk evaluations, and delivering practical recommendations that align with regulatory requirements.

Key responsibilities

• Perform comprehensive security assessments, including technical and governance reviews, to identify gaps.
• Plan and execute security audits against policies, regulations and industry best practices.
• Conduct cybersecurity risk assessments and propose risk‑treatment plans.
• Review security architectures, system designs and technology implementations for compliance.
• Prepare assessment reports, audit findings, executive summaries and remediation recommendations.
• Support clients in implementing security controls and improving governance frameworks.
• Provide advisory services on cybersecurity policies, standards and best practices.
• Collaborate with project managers, technical teams and client stakeholders throughout project lifecycles.
• Participate in compliance initiatives, readiness assessments and certification exercises.
• Stay current on emerging threats, regulatory changes and industry standards.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Systems or related field.
• Minimum 5 years of professional experience in information security, cybersecurity consulting or GRC.
• Proven experience conducting security assessments, audits and risk evaluations, preferably for government agencies.

Required skills

• Security assessment methodologies
• Security audit execution
• Cybersecurity risk assessment and treatment
• Security architecture review
• Regulatory compliance (e.g., ISO 27001, local government standards)
• GRC frameworks and tools