Consultant - Cybersecurity

• Cybersecurity Risk & Advisory: Perform and support risk assessments across IT systems, cloud environments, applications, and third-party services. Contribute to maintaining the risk register and support the definition of mitigation strategies and security improvements

• Security Architecture Support: Assist in the design and review of secure architectures across on-premise and cloud environments. Provide input on security controls, identity & access management, network segmentation, and secure system design principles.

• Data Security & Privacy: Support the implementation and assessment of data protection measures, including classification, encryption, data lifecycle management, and compliance with privacy and regulatory requirements.

• Disaster Recovery (DR) Planning: Participate in disaster recovery planning and testing activities,

supporting the validation and continuous improvement of recovery capabilities.

• Cyber Incident & Crisis Support: Collaborate with security operations and incident response teams to ensure effective integration of incident scenarios into crisis management and resilience processes.

• Governance, Risk & Compliance (GRC) support: Provide support in aligning cybersecurity practices with relevant frameworks and standards (e.g., ISO 27001, NIST, QSF, NIA). Assist in audits, control assessments, and evidence collection activities.

• Third-Party security risk management: Evaluate and monitor cybersecurity risks related to vendors and partners, supporting due diligence activities and tracking remediation actions.

• Continuous Improvement: Support ongoing enhancement of cybersecurity risk and resilience practices by incorporating lessons learned, regulatory updates, and evolving business needs.

• Bachelor’s in Information Security, IT, or related field (or equivalent experience).
• Experience: 2-3 years in cybersecurity consulting or audit
• Languages: Strong English required
• Certifications:
  • ISO/IEC 27001
  • ISO/IEC 22301