Security Consultant-Security Strategy, Risk & Compliance Services

As a Security Consultant in Security Strategy, Risk & Compliance Services, you will help clients understand, manage, and reduce their cybersecurity and compliance risks. As an entry-level team member, you will work under the guidance of senior consultants and managers and take part in the full engagement lifecycle.

Support cybersecurity strategy, governance, and roadmap engagements for clients across industries.

Take part in security risk assessments, including identifying assets, threats, vulnerabilities, and control gaps, and documenting risk ratings and treatment recommendations.

Help assess client security programs against frameworks and standards such as ISO/IEC 27001, NIST CSF, NIST SP 800-53, CIS Controls, and SOC 2.

Support compliance assessments and readiness activities for regulations such as GDPR, PCI DSS, HIPAA, and local data protection and cybersecurity laws.

Help develop and review security policies, standards, procedures, and control documentation.

Collect and analyze evidence from client stakeholders through interviews, document reviews, and control walkthroughs.

Support third-party and vendor risk assessments.

Help maintain risk registers, compliance tracking tools, and governance, risk, and compliance (GRC) platforms.

Help prepare security awareness materials and support training sessions.

Support business continuity, disaster recovery, and incident response planning and testing activities.

Prepare clear reports, executive summaries, dashboards, and presentations that communicate findings and recommendations to technical and business audiences.

Follow professional standards, confidentiality requirements, and quality processes on every engagement.

Keep learning about emerging threats, regulations, and security technologies, and earn relevant certifications.

Work with onshore and offshore teams, and report progress, risks, and issues to the engagement lead.