Consultant - Cybersecurity

We are seeking a Cybersecurity Consultant with analytical, technical, and communication skills to support corporate cybersecurity initiatives across multiple domains, including risk, architecture, data security, and resilience. The role is designed for a well-rounded professional who can operate in dynamic environments and bridge the gap between technical teams, business stakeholders, and security governance functions.

• Cybersecurity Risk & Advisory: Perform and support risk assessments across IT systems, cloud environments, applications, and third-party services. Contribute to maintaining the risk register and support the definition of mitigation strategies and security improvements
• Security Architecture Support: Assist in the design and review of secure architectures across on-premise and cloud environments. Provide input on security controls, identity & access management, network segmentation, and secure system design principles.
• Data Security & Privacy: Support the implementation and assessment of data protection measures, including classification, encryption, data lifecycle management, and compliance with privacy and regulatory requirements.
• Disaster Recovery (DR) Planning: Participate in disaster recovery planning and testing activities,

supporting the validation and continuous improvement of recovery capabilities.

• Cyber Incident & Crisis Support: Collaborate with security operations and incident response teams to ensure effective integration of incident scenarios into crisis management and resilience processes.
• Governance, Risk & Compliance (GRC) support: Provide support in aligning cybersecurity practices with relevant frameworks and standards (e.g., ISO 27001, NIST, QSF, NIA). Assist in audits, control assessments, and evidence collection activities.
• Third-Party security risk management: Evaluate and monitor cybersecurity risks related to vendors and partners, supporting due diligence activities and tracking remediation actions.
• Continuous Improvement: Support ongoing enhancement of cybersecurity risk and resilience practices by incorporating lessons learned, regulatory updates, and evolving business needs.
• Bachelor’s in Information Security, IT, or related field (or equivalent experience).
• Experience: 2-3 years in cybersecurity consulting or audit
• Languages: Strong English required
• Certifications:
• ISO/IEC 27001
• ISO/IEC 22301