Position Overview
We are seeking an experienced Information Security Consultant to support security assessments across cloud, infrastructure, and application environments. This individual will evaluate existing and proposed technology solutions, identify security risks and control gaps, and provide practical recommendations to reduce risk and strengthen overall security posture.
This is a senior-level consulting role requiring someone who can work independently, navigate complex technical environments, and partner effectively with application development, infrastructure, architecture, project, and cybersecurity teams.
Key Responsibilities
- Conduct comprehensive security and cyber risk assessments across applications, infrastructure, cloud services, and technology solutions.
- Evaluate existing security controls and identify potential vulnerabilities, control gaps, and areas of risk.
- Assess security requirements across on-premises, cloud, and SaaS environments.
- Review areas such as identity and access management, authentication, authorization, network security, firewalls, cloud configurations, vulnerability management, and data protection.
- Perform technical and architectural security reviews for new and existing technology initiatives.
- Recommend practical short- and long-term approaches for mitigating identified security risks.
- Partner with application development, infrastructure, architecture, cybersecurity, and project teams to develop remediation strategies.
- Document security findings, control gaps, risks, and recommended mitigation strategies.
- Evaluate compensating controls when identified risks cannot be immediately remediated.
- Help ensure security requirements are incorporated throughout the software development lifecycle (SDLC).
- Review application-security and DevSecOps controls, including SAST, DAST, and Software Composition Analysis (SCA).
- Apply established cybersecurity frameworks and standards when conducting assessments.
- Provide security guidance and act as a trusted technical advisor to cross-functional stakeholders.
- Research unfamiliar technologies and independently determine applicable security requirements and risks.
Required Qualifications
- Strong professional experience in information security, cybersecurity, or IT risk management.
- Demonstrated experience conducting technical security assessments and cyber risk assessments.
- Broad understanding of security across cloud, infrastructure, networking, and application environments.
- Strong knowledge of security controls related to:
- Identity and access management
- Multifactor authentication
- Authentication and authorization
- Network and firewall security
- Vulnerability management
- Cloud security
- Application security
- Data protection
- Experience identifying security control gaps and translating technical findings into actionable remediation recommendations.
- Working knowledge of NIST Cybersecurity Framework (CSF) and/or NIST SP 800-53.
- Experience working with application development, infrastructure, architecture, and project teams.
- Ability to independently research technical environments, gather information from stakeholders, and make informed security recommendations.
- Strong written and verbal communication skills.
Top Skills
- Security Assessments / Cyber Risk Assessments
- Cloud Security, particularly Microsoft Azure
- NIST CSF / NIST SP 800-53
- Infrastructure, Network, and Application Security
- Security Controls and Risk Analysis
- Security Architecture Reviews
- Risk Mitigation and Remediation Planning
- Cross-functional Technical Consulting
Tools & Technology Experience
Experience with or a strong understanding of:
Microsoft Azure and Azure security controls
AWS and/or Google Cloud Platform
Identity and access management / IAM
Multifactor authentication and authorization controls
Network security and firewalls
Vulnerability management technologies
Cloud security controls and configurations
SAST, DAST, and SCA technologies
DevSecOps practices
Secure Software Development Lifecycle (SDLC)
Security architecture and design principles
NIST CSF and NIST SP 800-53
Preferred Qualifications
- 7+ years of experience in information security, cybersecurity consulting, security architecture, or a related field.
- Strong experience securing or assessing Microsoft Azure environments.
- Experience developing or evaluating security/reference architectures.
- Experience working within complex or regulated enterprise environments.
- Familiarity with ISO 27001 or similar security standards.
- Experience across multiple cloud platforms, including Azure, AWS, and/or Google Cloud Platform.
- CISSP, cloud security, GIAC/SANS, or comparable security certifications are beneficial but not required.