IT Security Consultant

Our client is looking for an experienced IT Security Officer to oversee cybersecurity risk assessments, security architecture reviews and incident management across its IT systems, applications, infrastructure and cloud environments.

Key Responsibilities

• Review system architectures, data flows, interfaces, APIs, internet-facing entry points and security controls to identify vulnerabilities and potential security risks.
• Conduct cybersecurity risk assessments for new and existing IT systems, applications, infrastructure and cloud services.
• Perform security reviews and recommend appropriate controls to address identified risks and vulnerabilities.
• Manage cybersecurity incidents, including triage, investigation, containment, remediation, recovery and post-incident reviews.
• Conduct vulnerability assessments and coordinate remediation activities to ensure identified security issues are addressed.
• Review and strengthen application, infrastructure and cloud security in accordance with security best practices and industry standards.
• Support cybersecurity governance, audit activities, security policies and compliance requirements.
• Work with internal stakeholders, technical teams and external vendors to implement and maintain effective security controls.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• Minimum 5 years of relevant experience in IT security, cybersecurity risk management, application security or cloud security.
• Strong understanding of system architecture, application architecture, data flows, APIs, network security and cloud environments.
• Hands-on experience conducting cybersecurity risk assessments and security reviews across IT systems, applications and infrastructure.
• Experience in cybersecurity incident response and management, including investigation, containment, remediation and recovery.
• Good knowledge of application security principles, vulnerability management and security best practices.
• Familiarity with security frameworks and standards such as ISO 27001, NIST and OWASP.
• Relevant professional certifications such as CISSP, OSCP, CCSP, CRISC, AWS Security certification or equivalent are preferred.