Senior Security Consultant

Job Purpose

To protect the organization from growing security threats by identifying security gaps and risks, coordinating with implementation teams to close them, and ensuring the company's security posture remains current against the evolving threat landscape. The role owns the full lifecycle of security risk management identify, notify, plan, execute, and deliver — across all IT & Digital systems and sites.

Key Responsibilities

Security Gap & Risk Identification

• Conduct regular security assessments, audits, and reviews to evaluate the organization's security posture
• Proactively identify security gaps, vulnerabilities, and risks across network, systems, applications, cloud, and end-user environments
• Research and recommend resolutions and mitigation strategies for identified and emerging threats
• Stay up to date on the latest security threats, attack techniques, and industry vulnerabilities, and assess their relevance/impact to the organization

Notification, Planning & Coordination

• Notify relevant stakeholders and management promptly of identified security gaps, risks, and threats
• Develop clear remediation plans with priorities, timelines, and ownership for each identified gap
• Coordinate closely with IT, network, and implementation teams to execute remediation plans and close security gaps
• Track remediation progress end-to-end and ensure gaps are closed within agreed timelines, escalating delays as needed

Monitoring & Threat Management

• Monitor security alerts and events using QRadar or other SIEM/monitoring tools to detect potential threats and incidents
• Analyze security events, investigate anomalies, and determine appropriate response actions
• Support incident response activities, including investigation, containment, and post-incident review
• Maintain and continuously improve threat detection use cases, rules, and monitoring coverage

Governance, Compliance & Reporting

• Ensure security practices align with recognized frameworks and standards (e.g., ISO 27001, NIST) and applicable regulatory requirements
• Maintain a security risk register documenting identified gaps, status, ownership, and closure evidence
• Prepare and present regular reports on security posture, open risks, remediation status, and emerging threats to management
• Support internal and external security audits and assessments

Advisory & Continuous Improvement

• Advise management and IT teams on security best practices, policies, and controls
• Recommend and help plan security improvements, tools, and technologies to strengthen the organization's defences
• Support security awareness efforts across the organization
• Continuously review and enhance security processes to keep pace with the evolving threat landscape

Qualifications & Experience

• Bachelor's Degree in IT, Computer Science or a related field
• 10 – 15 years of experience in information/cyber security, including hands-on experience identifying security gaps and coordinating remediation with implementation teams
• Proven track record of managing the full lifecycle of security risks: identify, notify, plan, execute, and deliver
• Experience in marine, construction, contracting, or similar industries is an advantage

Certifications & Technical Skills

• CISM (Certified Information Security Manager) certified — required
• CISA (Certified Information Systems Auditor) certified — required
• Hands-on experience with QRadar or other SIEM/security monitoring tools
• Strong knowledge of network security, cloud security, and endpoint security principles
• Solid understanding of security frameworks and standards (ISO 27001, NIST, CIS Controls, etc.)
• Familiarity with vulnerability management, penetration testing, and risk assessment methodologies
• Up-to-date knowledge of current and emerging cyber threats, attack techniques, and mitigation approaches

Soft Skills

• Strong analytical, investigative, and problem-solving skills
• Excellent coordination skills, with the ability to work effectively with cross-functional implementation teams
• Clear and confident communication and reporting skills, including to senior management
• Highly organized, with strong follow-through from identification to closure of security gaps
• Ability to work independently, prioritize risks, and drive results under pressure

Preferred (Added Advantage)

• Additional certifications such as CISSP, CEH, CRISC or Fortinet NSE
• Experience securing marine/offshore or remote-site IT environments
• Experience with cloud security on OCI and/or Azure