Senior Cyber Security Consultant - GRC/Cloud Security

Role & Responsibilities : - Lead cybersecurity consulting engagements, including security assessments, risk assessments, gap assessments, and security maturity reviews. - Assess clients' cybersecurity posture against frameworks and standards such as ISO 27001, NIST CSF, CIS Controls, PCI DSS, SOC 2, and applicable regulatory requirements. - Identify, analyze, and prioritize cybersecurity risks and recommend appropriate remediation strategies. - Develop and review cybersecurity policies, standards, procedures, guidelines, and governance frameworks. - Conduct Vulnerability Assessment and Penetration Testing (VAPT) coordination and support remediation of identified vulnerabilities. - Perform security reviews of applications, infrastructure, cloud environments, networks, and third-party/vendor ecosystems. - Support Security Architecture and Design reviews, including network security, IAM, cloud security, endpoint security, and data protection. - Advise clients on cloud security across platforms such as AWS, Azure, or GCP. - Support Identity and Access Management (IAM) initiatives, including privileged access, access reviews, authentication, and authorization controls. - Conduct cybersecurity audits and support internal, external, and regulatory audits. - Develop risk registers, security assessment reports, executive dashboards, and remediation roadmaps. - Assist with incident response, cybersecurity investigations, and security improvement initiatives where required. - Evaluate third-party and supplier security risks and perform vendor security assessments. - Stay current with emerging threats, vulnerabilities, attack techniques, cybersecurity technologies, and regulatory changes. - Lead client discussions, workshops, presentations, and cybersecurity awareness sessions. - Mentor junior cybersecurity consultants and review their deliverables. - Manage multiple cybersecurity projects simultaneously while ensuring quality, timelines, and client expectations are met. Preferred Candidate Profile : - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline. - 5 - 10 years of relevant experience in cybersecurity, information security, GRC, security consulting, risk management, or a related field. - Strong understanding of cybersecurity principles, enterprise security architecture, risk management, and security controls. Core Competencies : - Cybersecurity Governance, Risk & Compliance (GRC) - Vulnerability Management / VAPT - Cloud Security - IAM / PAM - Security Architecture - Incident Response / SOC - Third-Party Risk Management - Data Security - Application Security Requirements : - Strong knowledge of cybersecurity frameworks and standards such as ISO 27001, NIST, CIS, PCI DSS, SOC 2, and relevant regulatory requirements. - Experience conducting security assessments, audits, risk assessments, and gap assessments. - Strong analytical and problem-solving skills with the ability to translate technical risks into business impact. - Excellent communication and presentation skills, with the ability to interact effectively with C-level executives, business stakeholders, IT teams, and technical teams. - Strong report-writing and documentation skills. - Ability to independently manage cybersecurity consulting engagements from scoping through delivery and remediation. - Relevant certifications are preferred, such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, Security+, CEH, OSCP, or cloud-security certifications.