Cyber Security Consultant

Key responsibilities

• Identifying and cataloguing security tools and technologies across the organisation.
• Investigating IT platforms that provide security outcomes, even where security isn't their primary purpose.
• Building and maintaining a central inventory of security capabilities and supporting technologies.
• Mapping security technologies, capabilities and controls against frameworks including NIST CSF, NIST 800-53, CIS Critical Security Controls and CRI Profile.
• Establishing a baseline security capability model.
• Benchmarking current security capabilities against recognised industry frameworks and standards.
• Running workshops, interviews and discovery sessions with security and technology stakeholders.
• Challenging assumptions and validating information from multiple sources.
• Producing clear analysis, executive reporting and progress updates.

Key Skills

• Cybersecurity / Information Security
• Security Controls & Control Mapping
• Security Capability Assessment
• Cybersecurity Frameworks
• NIST / CIS / CRISecurity Maturity Assessments
• Security Architecture
• GRC / Cyber Risk
• Stakeholder Engagement
• Workshop Facilitation
• Strong analytical and investigative skills
• Excellent written and verbal communication

Desirable

• Financial services or other regulated industry experience.
• Experience developing security capability or maturity models.
• Experience working within large, complex enterprise environments.