Cyber Security Consultant - SEC/OPM/COO-OSM

Job Summary:

We are seeking a seasoned Cybersecurity Consultant to support operational security and risk management activities across both traditional and cloud infrastructures and applications. The ideal candidate will be responsible for executing security validations and managing exception processes, reviewing security incidents, conducting multi-level risk assessments, and driving security initiatives. This role also involves overseeing remediation efforts with strong governance, addressing identified risks and vulnerabilities, and developing strategies to enhance overall security posture and ensure compliance.

Responsibilities:

Risk Management & Security Assessment

• Conduct comprehensive risk assessments and security evaluations for on-premise and cloud applications and infrastructure.

• Identify and assess threats, vulnerabilities, risks, and potential attack vectors, and prioritize mitigation efforts.

• Maintain up-to-date security risk assessments and benchmarks for all products, services, and infrastructure within scope.

• Assess and manage IT risk treatment for new projects and infrastructures, ensuring security-by-design principles are applied.

• Carry out regular security assessments of critical infrastructure, including penetration tests, high-privilege account reviews, hardening checks, and secure-by-design validations.

Security Governance & Compliance

• Enforce group security policies, standards, procedures, and best practices.

• Evaluate security configurations, policies, and procedures, ensuring alignment with security frameworks.

• Assess compliance with industry standards and regulatory requirements (e.g., NIST, ECB, SOC 2, PCI-DSS, OWASP).

• Develop and maintain risk management frameworks, playbooks, KPIs/KRIs, and security reporting dashboards.

• Disseminate updates to group policies, standards, and IT governance decisions across the reporting department.

Security Operations & Incident Management

• Act as the primary security expert and point of contact for operational security and risk management activities.

• Perform day-to-day security validations and manage security exceptions.

• Drive global security programs such as penetration testing and vulnerability management.

• Lead resolution of security incidents and contribute to post-mortem investigations.

• Coordinate remediation of critical vulnerabilities with technical teams, SOC, and CERT.

• Alert management promptly upon detecting security anomalies within the functional scope.

Audit & Stakeholder Coordination

• Contribute to internal and regulatory security audits.

• Monitor and coordinate treatment of security risks and ensure timely closure of audit recommendations.

• Communicate regularly with stakeholders regarding security risks, mitigation plans, and audit statuses.

• Provide clear security recommendations and risk insights to leadership and technical teams.