L3 Cybersecurity Consultant (Ref 26589)

Your tasks

• Plans and conducts cybersecurity risk assessments across infrastructure, applications and cloud environments.

• Assesses compliance against IM8 and other applicable security requirements using documented evidence and defined assessment criteria.

• Performs vulnerability assessments and security configuration reviews, analyses findings and validates risk and remediation priorities.

• Supports security audits by preparing assessment plans, reviewing evidence, documenting observations and tracking findings to closure.

• Reviews cloud security posture through CSPM findings and evaluates cloud security risks and control gaps.

• Supports incident management activities, including assessment of security impact, coordination of actions and documentation of outcomes.

• Coordinates vulnerability management activities, including review, prioritisation, remediation tracking and risk acceptance inputs.

• Produces clear assessment reports that describe scope, evidence, findings, risk impact and recommended corrective actions.

• Maintains sufficient independence from personnel implementing the controls being assessed and highlights potential conflicts of interest.

• Communicates assessment results and security risks to client stakeholders and relevant delivery teams.

• Tracks assigned actions and deliverables to completion within agreed timelines and service requirements.

• Contributes to knowledge sharing, assessment templates and continuous improvement of cybersecurity consulting practices.

• Performs any other related task as required.

Requirements

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).

• Certifications relevant to the services provided carry additional weightage on a candidate’s qualification for the role.

• 6+ years of overall relevant experience.

• 5+ years of experience in Cybersecurity Consulting, Risk, Compliance, VA and Cloud Security.

• Demonstrated experience in security risk assessment, IM8/security compliance, VA, security configuration review, audit, CSPM, incident management, vulnerability management and cloud security.

• Demonstrated ability to perform assessments independently from personnel implementing the controls being assessed.

Required certification(s)

• CISSP, CRISC, or equivalent certification.

Good-to-have certification(s)

• CISA.

• CGEIT.

• AWS Certified Security - Specialty.

Other

Licence no:L 12C6060