Security Consultant

We are looking for a Security Consultant to join the team of our client.

This role will directly engage in delivery on programs and projects, defining security architectures, providing security guidance, identifying and prioritizing security-related requirements, promoting secure-by-default designs and facilitating delivery of information security services throughout the system development life cycle (SDLC).

Essential functions of the job:

• Define security architectures and provide pragmatic security guidance that balance business benefit and risks.
• Define security configuration standards for platforms and technologies
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders
• Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios

Knowledge and skills requirements:

• Strategic skills to assist with the development of a long-term vision for the firms risk management security framework & approach
• Five or more years Working experience with the architecture, design and engineering of web-based multi-tier information systems or network infrastructures
• Experience with security architecture, design and assessment of messaging, ERP, CRM and or data analytics solutions
• Experience conducting risk assessments, vulnerability assessments, vendor and third party risk assessments and recommending risk remediation strategies
• Experience working with common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT.

Job Requirements:

• Five or more years of experience in the management of a significant Information Security risk management function.
• 8 or more years of experience in an Information Security or Information Technology discipline
• Previous experience as a Systems Administrator in a Microsoft Active Directory environment
• Strong English language skills are required

Certification requirements:

• Candidates are preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA.

English Level: Upper Intermediate

Shift : Monday to Friday 9-6PM

Location: Microcentro