Information Security Consultant

Responsibilities

• Audit, test, or review IT systems, network or application architecture and business processes for compliance with best practices and/or regulatory requirements
• Review and recommend technical, administrative, and physical controls to mitigate identified risk
• Perform risk assessments of IT infrastructure and applications and make recommendations for improvements based on the client’s stated risk tolerance levels
• Develop materials and processes to assist clients with implementing both technical and non-technical controls
• Assist with incident response during security events

• 2+ years of related experience
• 2+ years implementing Cybersecurity Programs
• 2+ years implementing Compliance and Governance Programs
• CISSP or other current industry standard certifications in areas of security expertise
• Experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities
• Ability to identify and evaluate risk to IT systems and associated business processes and communicate risks to management
• Demonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security frameworks and controls (e.g., NIST, ISO, CIS)
• Demonstrated experience reviewing and recommending appropriate technical, administrative, and physical controls
• Demonstrated experience selecting and implementing appropriate risk mitigation strategies to ensure IT systems remain within established risk tolerance levels
• Ability to develop policies, standards and baseline configurations
• Strong attention to detail and ability to document findings and convey information
• Ability to manage project deliverables and deadlines
• Ability to provide superior customer service via phone and email
• Strong listening and presentation skills
• Ability to clearly communicate with co-workers, management, clients, and vendors