Information Security Consultant

In this role, you will collaborate closely with one of our esteemed clients—a globally recognized leader in their industry, distinguished by their commitment to excellence, innovation, and delivering exceptional value. As a trusted IT consulting partner,
Dautom is supporting their strategic initiatives by connecting them with exceptional talent to drive business growth and transformation.

Role:
Information Security Consultant

Notice: 30 Days

Information Security Consultant/Expert

• Job responsibilities
• Supervise and oversee information security governance, risk, compliance, and assurance activities.
• Lead and guide the team in security risk assessments, control reviews, and security compliance activities.
• Supervise third-party/vendor security assessments and associated risk management activities.
• Monitor compliance with applicable cybersecurity regulations, standards, and organizational requirements.
• Coordinate with internal and external auditors, regulators, and security service providers.
• Mentor and provide direction to information security team members and ensure effective delivery of assigned activities.
• Develop and execute information security strategy and roadmap in alignment with business goals, industry standards, and regulatory requirements.
• Establish and maintain information security policies, standards, guidelines, and procedures.
• Identify and assess potential security risks and vulnerabilities through risk assessments and develop risk mitigation strategies and controls.
• Develop and maintain an incident response plan to address security incidents effectively. Coordinate incident response activities, including detection, analysis, containment, eradication, and recovery.
• Oversee the implementation and management of security controls, technologies, and solutions.
• Conduct periodic security audits, assessments, and penetration testing to evaluate the effectiveness of security controls and identify areas for improvement.
• Evaluate and manage the security risks associated with third-party vendors and service providers.
• Coordinate with SOC and technical teams for security incidents, risk remediation, and corrective actions.
• Prepare and deliver security reports, metrics, and updates to stakeholders, and relevant committees.
• Provide leadership, guidance, and mentorship to the information security team. Manage and allocate resources effectively to meet security objectives.
• Communicate project progress, status, risks, and issues to relevant stakeholders and senior management.
• Engage and manage relationships with project stakeholders, including business owners, project sponsors, vendors, and external partners. Review and provide security oversight for projects, applications, infrastructure, cloud services, and technology changes.
• Review security exceptions, risk acceptance requests, and remediation plans.
• Develop and monitor information security KPIs, KRIs, audit findings, and management reports.
• Identify security gaps and lead initiatives to improve the organization’s overall security posture.
• Provide security guidance and advisory support to management and business/technical stakeholders.

Skills

• Strong understanding of information security principles, concepts, best practices, and regulatory requirements.
• Ability to effectively plan, execute, and control projects, ensuring they are delivered on time, within budget, and according to quality standards.
• Identify, assess, and mitigate risks associated with projects. Develop risk mitigation strategies and controls to address identified risks.
• Evaluate security controls and mechanisms for project solutions.
• Excellent communication skills, both verbal and written.
• Strong leadership skills to guide and motivate project teams.
• Knowledge of security governance frameworks, regulatory requirements, and standards.
• Familiarity with change management principles and methodologies.
• Strong problem-solving and critical-thinking skills to identify and address project-related security challenges.
• Effective collaboration skills to work with cross-functional teams, negotiate priorities, and resolve conflicts.
• Align security initiatives with business objectives and demonstrate the value of information security to senior management.

Qualifications & Work Experience

Qualification

Master's or bachelor's degree in computer science, Management Information Systems, or other related fields.

Experience

• Practical experience required for a minimum of (15) years or more for holders of bachelor's degree and (12) years or more for holders of…