Consultant - Information Security

Job Description

• Contributing to information security risk assessment processes
• Conducting Infosec risk and impact assessments based on security and privacy principles.
• Supporting the review of security and privacy aspects in contracts.
• Helping with compliance certification and client audit activities.
• Assisting in ensuring adherence to information security and privacy regulations.
• Providing support to business and risk management leaders on security matters
• Contributing to the handling of security incidents and data breach investigations.
• Helping maintaining risk assessment trackers and sensitive information inventories.
• Supporting third-party risk management activities.
• Assisting in driving security awareness initiatives.
• Conducting review of contractual contracts, privacy contracts / exhibits / privacy agreements
• Handle information security incidents, data breaches investigations
• Support business unit leaders and risk management leaders in issues related to information security
• Creation and maintenance of risk assessment trackers and keeping them current
• Ensure that contract arrangements are in place and being complied with. Obtain necessary evidence for the same. Conducting necessary due diligence on subcontractors / third party.
• Experience on privacy regulations (HIPAA/ HITECH, GDPR, POPIA, PIPEDA)

Qualifications

Education: 

• Bachelor’s degree in information technology or computer science, or a related field

Experience: 

• Minimum 5-7 years of experience in Information Security.

Technical Skills: 

• Good understanding of IT and Information Security concepts, terminology, and common frameworks (e.g., NIST, ISO 27001) is highly desirable

Soft Skills

• Excellent organizational and time management skills with strong attention to detail.
• Exceptional written and verbal communication skills, capable of summarizing complex information clearly and concisely.
• Strong interpersonal skills to effectively collaborate with various internal teams and stakeholders.
• Ability to handle multiple tasks concurrently and prioritize effectively in a dynamic environment.
• Certifications (Preferred): o CISA, CISM, CISSP