Cybersecurity Consultant, GISI Consulting Group

Cybersecurity Consultant, GISI Consulting Group About GISI Consulting
Group and PalladiumGISI Consulting
Group (GISI CG) is a top 10 global provider of program and project management
and engineering consulting services delivering outcomes and solutions for some
of the most complex challenges.  We deliver services in infrastructure & mobility, earth
& water, and government & society segments across more than 100
countries.
With over 5,000 projects
annually and a global team of over 11,000 professionals, our advisory,
consulting, design and program management capabilities enable us to create a
safer and more sustainable world. Learn more about GISI CG at  Palladium, a GISI company, works to design, develop and deliver
positive impact on the lives and livelihoods of people around the globe;
broaden access to health, water, power, and infrastructure; build enduring,
sustainable, and transformative institutions and market systems to address
global challenges; and conserve the natural world. We operate in over 90
countries and have a workforce of 2,100 talented, motivated, and diverse staff
around the world. This role will be hired through Palladium, an operational
platform for GISI CG.This Opportunity The Cybersecurity Consultant will support
GISI Consulting Group’s (GCG) Operating Companies (OPCOs) in strengthening
their cybersecurity posture by advancing their cybersecurity maturity in
alignment with GCG global security strategy, policies, and standards. The role
will act as an advisor to local business and technology teams, conduct
cybersecurity maturity assessments, identify gaps and risks, drive remediation
initiatives, and support the implementation of security best practices across
diverse business environments. The Manager will work closely with the ICT
Cybersecurity and Compliance workstream teams to ensure consistent application
of security controls.

This consultancy is up to ten months with
the possibility of an extension to one year.

Location This role will be based remotely in the UK. To be
considered for this position, you must have valid work rights in the country
where the role is based. Please note that visa sponsorship is not available for
this role. Reporting Lines The Consultant will work under the direction of the SVP, IT Operations (based in the US)
This role will have regular meetings with the Cybersecurity and Compliance workstream teams and key stakeholders from the OPCOsPrimary

Roles and Responsibilities Partner with assigned OPCOs to assess, improve,
and monitor their cybersecurity maturity and alignment with GCG’s
Information Security Policies and standards

Identify, assess, and monitor applicable local
privacy, regulatory and contractual requirements for assigned OPCOs, and
ensure alignment with both local obligations and GCG’s standards

Develop and maintain remediation roadmaps and
action plans to address identified security gaps Support OPCOs in implementing security controls,
standards, and procedures in accordance with GCG’s cybersecurity
requirements

Provide guidance on cybersecurity governance,
risk management, vulnerability management, incident response, data
protection, identity and access management, and third-party risk
management

Develop SOPs, templates, checklists, and guidance
documents to support consistent adoption of cybersecurity best practicesEssential
Criteria Bachelor’s degree in Computer Science, Cybersecurity, or equivalent8+ years of relevant ICT experience in the field of cybersecurity

Strong understanding of cybersecurity frameworks and industry best practices, including NIST CSF, CIS Controls, ISO 27001, and risk management principles

Demonstrated experience assessing and improving cybersecurity maturity programs

Knowledge of security governance, compliance, vulnerability…