cyber security consultant

Cyber Security Consultant

AURMAK

Key Responsibilities<ul><li>Conduct cyber and information security assessments across IT infrastructure, cloud, applications, identity, endpoint, network, and third-party environments.</li><li>Identify security risks, control weaknesses, gaps, and practical mitigation options.</li><li>Support ISO 27001, NIST CSF, CIS Controls, PCI DSS, and local regulatory readiness activities.</li><li>Help clients understand what security controls mean in practice and how to implement them proportionately.</li><li>Review existing technical architectures and recommend secure design improvements.</li><li>Support solution design for security technologies such as IAM, MFA, firewalls, EDR, SIEM, vulnerability management, backup/recovery, DLP, email security, and cloud security controls.</li><li>Produce clear risk reports, gap assessments, control recommendations, and implementation roadmaps.</li><li>Run client workshops to gather requirements, explain findings, and agree remediation priorities.</li><li>Support incident response preparation, security policies, risk registers, asset classification, and control mapping.</li><li>Work with sales and pre-sales colleagues to scope technical work realistically and avoid delivery overcommitment.</li><li>Stay current with cyber threats, attack methods, security tooling, and regulatory or framework changes.</li></ul>Required Experience<ul><li>4 to 8 years of experience in cyber security, information security, IT infrastructure, cloud, network engineering, security engineering, SOC, GRC, or technical consulting.</li><li>Strong understanding of IT stacks, including networks, servers, endpoints, cloud platforms, identity systems, databases, and business applications.</li><li>Experience assessing risk and recommending mitigation controls.</li><li>Experience with security frameworks such as ISO 27001, NIST CSF, CIS Controls, PCI DSS, or equivalent.</li><li>Experience with technical security solution design, security architecture review, or security implementation.</li><li>Client-facing consulting experience is preferred.</li></ul>Technical Knowledge Required<ul><li>Network security: firewalls, segmentation, VPNs, IDS/IPS, and secure remote access.</li><li>Identity and access management: MFA, privileged access, role-based access, and joiner/mover/leaver processes.</li><li>Cloud security: shared responsibility, secure configuration, logging, access control, encryption, backup, and monitoring.</li><li>Endpoint and server security: EDR, patching, hardening, malware protection, and vulnerability management.</li><li>Security monitoring: SIEM, logging, alerting, incident triage, and SOC processes.</li><li>Data protection: encryption, data classification, backup, DLP, and privacy-by-design.</li><li>Risk and controls: inherent risk, residual risk, likelihood, impact, control design, control effectiveness, and remediation planning.</li><li>Secure-by-design: security requirements, architecture review, threat modelling basics, and early control integration into projects.</li></ul>Framework Knowledge<ul><li>ISO 27001: ISMS, risk assessment, Statement of Applicability, policies, controls, and internal audit readiness.</li><li>NIST Cybersecurity Framework: Identify, Protect, Detect, Respond, and Recover.</li><li>CIS Controls: practical technical safeguards and prioritised control implementation.</li><li>PCI DSS: useful where clients handle payment card data.</li><li>NIS CAF / NCSC-style principles: governance, risk management, asset management, supply chain, incident response, and resilience.</li><li>Information Security Framework or local regulatory knowledge.</li></ul>Skills and Behaviours<ul><li>Strong analytical thinking with the ability to separate symptoms from root causes.</li><li>Able to explain technical risk in plain English to non-technical stakeholders.</li><li>Practical mindset, recommending controls that fit the client's size, budget, maturity, and risk exposure.</li><li>Good documentation and report-writing discipline.</li><li>Comfortable running workshops, technical interviews, and findings readouts.</li><li>Able to balance security ideals with business reality.</li><li>Trustworthy, calm, and credible with client stakeholders.</li></ul>Pay: From Rs500,000.00 per monthWork Location: Hybrid remote in Lahore

Cyber Security Technical Consultant / Security Specialist

BAE Systems

<div></div><div><div>Location
Doha , Qatar
<div>Other
Experienced professionals</div></div></div>
 <div><div><div>The Senior Cybersecurity Certification Consultant is responsible for leading and executing certification assessment activities to evaluate organizations&rsquo; compliance with national and international cybersecurity and information security standards. The role ensures fair, consistent, and objective certification decisions while overseeing assessment teams, managing certification cases, and maintaining the integrity of the certification process. It also contributes to developing certification methodologies, tools, and frameworks aligned with regulatory and accreditation requirements.</div>
<div></div><div>Key Responsibilities:
 </div><ul><li>Delivery of certification services
 
Senior Information Security / Cyber Security Assessor is responsible for the
 
day to day certification application assessment review, validation
 
</li><li>Manage the team and assign the cases
 
</li><li>Maintain detailed and organize
 
records of the certification process, ensuring accuracy and completeness
 
</li><li>Ensuring that the highest standards
 
of competence and impartiality are maintained, and that consistency is achieved
 
across certification activities
 
</li><li>Review different organizations&rsquo;
 
Information Security / Cyber Security compliance to national or international
 
standards and best practices in Information Security / Cyber Security
 
</li><li>Evaluate the design and operating
 
effectiveness of Information Security / Cyber Security controls
 
</li><li>Document observations/findings in
 
such a manner that they are clearly understandable and traceable and are based
 
on objective evidence
 
</li><li>Develop and maintain certification
 
procedures and required tools based on National Information Security Compliance
 
framework
 
</li><li>Maintain impartiality,
 
confidentiality and to declare any potential conflicts of interest that might
 
jeopardize an objective assessment as required
 
</li><li>Develop measurement and compliance
 
mechanisms &amp; tools to monitor improvements
 
</li><li>Provide a recommendation on the outcome
 
of an assessment
 
</li><li>Stay up to date with the latest
 
developments in security, emerging threats, and evolving technology to ensure
 
the certification process remains relevant
 
</li><li>Conduct efficient and effective Cyber
 
Security risk assessments and Information Security / Cyber Security audit
 
procedures
 
</li><li>Develop and deliver internal training
 
and workshop to upscale and build Information Security / Cyber Security,
 
compliance, assurance and audit capabilities within the team.
 
</li><li>Manage the external communication during
 
the audit: from the application till the issue of decision 
 
</li></ul> 
<h3 class="jobSectionHeader">Requirements</h3>
Education &amp; Experience
<ul><li>Bachelor&rsquo;s degree in Information Technology, Computer Information Systems, Cyber Security, or equivalent.</li>
<li>Minimum 20 years of professional experience in IT / Information Security / Cyber Security.</li>
<li>At least 4 years of experience as a senior auditor, assessor, or in cybersecurity risk/security management roles.</li>
<li>Experience in cybersecurity consulting or implementation aligned with national/international standards is an advantage.</li>
</ul>Certifications (Preferred)
<ul><li>CISSP, CISA, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent certifications.</li>
</ul>Technical Skills
<ul><li>Strong knowledge of cybersecurity risk assessment and audit methodologies.</li>
<li>Expertise in security frameworks and standards (ISO 27001, NIST, NIA, CSF, etc.).</li>
<li>Understanding of certification and accreditation standards (ISO/IEC 17021, 17024, 17065, 17006, ISO 19011, ISA, ITAF).</li>
<li>Hands-on experience in information security auditing and assurance.</li>
<li>Strong awareness of evolving cybersecurity threats and technologies.</li>
</ul>Core Skills
<ul><li>Excellent analytical, evaluation, and problem-solving abilities.</li>
<li>Strong technical report writing and documentation skills.</li>
<li>Ability to interpret compliance frameworks and certification criteria objectively.</li>
<li>Excellent communication and presentation skills in English (written and verbal).</li>
<li>Experience delivering training and workshops across government and private sectors.</li>
</ul>Behavioral Competencies
<ul><li>High attention to detail and ability to work under pressure and tight deadlines.</li>
<li>Strong interpersonal and stakeholder management skills.</li>
<li>Ability to work independently with high levels of professionalism and integrity.</li>
<li>Capability to manage multiple assignments and cross-functional teams effectively.</li>
<li>Commitment to impartiality, confidentiality, and ethical assessment practices.</li>
</ul><div>Language: English (required)
</div><div>Availability: As soon as possible
</div><div></div><div>The contract duration is 12 months, with the possibility of extension based on departmental requirements.
</div></div><div>Other
Experienced professionals</div></div>

Senior Cybersecurity Certification Consultant

Vensure Employer Solutions

<div>
 
 
 
 About the Company
 
 
 
 
 
 
 
 
 
 
 
 We are a proud work-from-office company. If you're ready to work on-site in a dynamic, global company, we'd love to hear from yo
 
 
 
 
 
 
 
 
 u.
 
 
 Vensure Employer Solutions is the largest privately held organization in the HR technology and service sector, providing a comprehensive portfolio of solutions, including HR/HCM technology, managed services, and global business process outsourcing (BPO). The company and its service providers collectively serve over 95,000 businesses and process over $135B in annual payroll. As a "One Employer Solution&rdquo; headquartered in Chandler, Arizona, Vensure helps thousands of businesses streamline and grow their operations with custom strategies that benefit both employers and employees. Find out more by visiting www.vensure.
 
 
 
 
 
 
 
 
 
 com.
 
 
 About th
 
 
 
 
 
 
 
 
 
 e Role
 
 
 The Cyber Security Specialist will be responsible for protecting the organization&rsquo;s computer systems and networks from cyber threats. This role involves identifying vulnerabilities, implementing security measures, and responding to security incidents. The ideal candidate will have a strong understanding of cyber security principles and practices, as well as experience with various security technologies and cyber security progra
 
 
 
 
 
 
 
 
 
 m areas.
 
 
 Respon
 
 
 
 
 
 
 
 
 <ul>
 <li>
 sibilities
 
 
 Review and validate detected cyber security incident
 </li>
 <li>
 s and risks.Determine the operational impacts of cyber security contr
 </li>
 <li>
 ol failures.Develop, track, and present cyber security statistics and metrics for as
 </li>
 <li>
 signed area.Respond to security breaches and incidents, by supporting less tenured cyber securit
 </li>
 <li>
 y personnel.Communicate business impacts and recommend remediation steps to deci
 </li>
 <li>
 sion makers.Develop and approve changes to cyber security procedures
 </li>
 <li>
 and systems.Apply information and knowledge about the latest cyber security trends and threats to prevent the realization of risk to the business
 </li>
 <li>
 enterprise.Provide input to enterprise resiliency, disaster recovery and business
 </li>
 </ul>
 
 
 
 
 
 
 
 
 continuity.
 
 
 
 
 
 
 
 
 
 
 <ul>
 <li>
 Qualifications
 
 
 Bachelors degree or 4+ years equivalent combination of experience i
 </li>
 <li>
 n related field.Skills, education (including other relevant non-traditional degree programs, certifications, or job training prog
 </li>
 <li>
 rams) preferred.Professional certifications such as CISSP, CEH, or CISM are h
 </li>
 <li>
 ighly desirable.Experience as a cyber security engineer or system administr
 </li>
 <li>
 ator is desired.Strong knowledge of security technologies such as firewalls, IDS/IPS, SIEM, and endpoint protection software and business systems (i.
 </li>
 <li>
 e. M365/Google).Experience with cloud security (e.g., AWS, Azure
 </li>
 <li>
 , Google Cloud).Knowledge of regulatory requirements and standards (e.g., GDPR, HIPAA,
 </li>
 <li>
 NIST, and ISO).Familiarity with software development practices and scripting languages (e.g., Python, PowerShell) for
 </li>
 </ul>
 
 
 
 
 
 
 
 
 task automation
 
 
 
 
 
 
 
 
 <ul>
 <li>
 
 .
 
 
 Required Skill
 
 s
 
 
 Technical Skills: Strong knowledge of network protocols, operating systems, and se
 </li>
 <li>
 
 curity tech
 
 nologies.Experience: Experience with security tools (e.g., SIEM, IDS/IPS, firewalls) as a tool administrator or engine
 </li>
 <li>
 
 er strongly desire
 
 d.Analytical Skills: Excellent problem-solving and analytical skills with the ability to assess
 </li>
 <li>
 
 and mitigate
 
 risks.Communication: Strong verbal and written communication skills with the ability to convey complex technical information to non-tec
 </li>
 <li>
 
 hnical stakeholders.
 
 Attention to Detail: Keen attention to detail and ability to manage multiple tasks and proj
 </li>
 <li>
 
 ects simulta
 
 neously.Team Player: Ability to work effectively as part of a team and collaborate with cros
 </li>
 </ul>
 
 
 
 
 
 
 
 
 s-functional gro
 
 
 
 
 
 
 
 
 <ul>
 <li>
 ups.
 
 
 Preferred Skills
 
 
 Experience with cloud security (e.g., AW
 </li>
 <li>
 S, Azure, Google Cloud).Familiarity with software development practices and scripting languages (e.g., Python, PowerShe
 </li>
 </ul>
 
 
 
 
 
 
 
 
 ll) for task automation.
 
 
 Pay rang
 
 
 
 
 
 
 
 
 
 e and compensation package
 
 
 This position is eligible
 
 
 
 
 
 
 
 <ul>
 <li>
 
 for the followin
 
 g benefits:
 
 
 Health Insurance: Medica
 </li>
 <li>
 
 l, dental, and v
 
 ision coverageRetirement P
 </li>
 <li>
 
 lan: 401(k) wi
 
 th company matchPaid Time Off: PTO, Holidays, Parental leave and Sick Leave provided as re
 </li>
 <li>
 
 quired by appli
 
 cable state lawOther Benefits: Life insurance, short term disability, long term disability, employee assistance program (EAP), flexible spending account (FSA
 </li>
 </ul>
 
 
 
 
 
 
 
 
 ), health savings account (
 
 
 
 
 
 
 
 
 
 HS)
 
 
 Equal Opportunity Statement
 
 
 This job description in no way states or implies that these are the only duties to be performed by the employee filling this position. Employee will be required to follow any other job-related instructions and to perform any other job-related duties requested by management. Management has the right to add to, revise, or delete information in this job description. Reasonable accommodation will be made to enable qualified individuals with disabilities to perform the essential functions of this position. This document does not create an employment contract, implied or otherwise, other than an
 
 
 
 
 &ldquo;at will&rdquo; employment relationship.
</div>

Cybersecurity Specialist

Logic, Inc.

<div><div>Security Consulting Team Lead/Consultant | Mid-Level | Full time
</div><div>Job No. R00344784 | Chicago, IL</div></div>
 <div><div>Job Description
We are
We are a global collective of innovators applying the New every day to improve the way the world works and lives. Help us show the world what&rsquo;s possible as you partner with clients to unlock hidden value and deliver innovative solutions. Empowered with innovative tools, continuous learning, and a global community of diverse talent and perspectives, we drive success in a new business architecture that disrupts conventional practices. Our expertise spans 40+ industries across 120+ countries and impacts millions of lives every day. We turn ideas into reality.
Accenture Security helps organizations prepare, protect, detect, respond to, and recover, at all points of the security lifecycle. We hire the very best security talent and arm them with the coolest tools and latest tech so they can help our clients build resilience as we create integrated, customized turnkey solutions. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle.
You Are
Passionate about security, you love what you do and have a genuine desire to outsmart the bad guys. You have experience in leading discovery conversations with client security teams (CISO, SOC leads, architects) to understand the current state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered 
compelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation of solution proposals, architecture diagrams, and business value assessments (BVAs) that articulate clear value outcomes and benefits.
The Work
We are expanding our team in search of experienced professionals to grow our Cyber Defense and Resilience practice, helping our clients modernize to an AI-powered defense posture. Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency.
You will work alongside Accenture's CrowdStrike Business Group as a trusted technical expert, supporting pre-sales engagements with deep platform knowledge and experience in hands-on delivery of CrowdStrike Falcon platform implementations for enterprise clients. You will work at the intersection of Accenture's consulting expertise and CrowdStrike's technology leadership, helping clients transform their security operations, consolidate tools onto the Falcon platform, and realize measurable outcomes.
You will be part of a specialized team that advises our clients on how to manage their cyber risk and solve hard security problems through a combination of strategic vision and operational expertise. You will contribute to the development and market positioning of Accenture CrowdStrike specific offerings and position those offerings at the core of opportunity pipeline acceleration support activities.
Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.</div></div>
 <div>Job Qualifications

Here's what you need
<ul><li>
Minimum 2 years hands-on experience with the CrowdStrike Falcon platform (endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity</li><li>
Minimum 2 years experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management</li><li>
Minimum 2 years experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure, GCP), OT/ICS environments, or hybrid data center</li><li>
Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate Degree, must have minimum 6 years work experience)</li></ul>

Bonus points in you have
<ul><li>
Active CrowdStrike certification(s): CCFA, CCSE, or CrowdStrike Champions Professional/Expert</li><li>
Direct experience with CrowdStrike NG-SIEM: migration delivery, parser development, CQL, or LogScale administration</li><li>
Experience delivering managed security services or working within an MSSP/MDR environment</li><li>
Experience leading or collaborating with global teams</li><li>
Experience with CTEM (Cyber Threat Exposure Management), vulnerability prioritization platforms (Qualys, Tenable, Rapid7), or attack surface management</li><li>
Working knowledge of compliance frameworks: NIST CSF, SOC 2, ISO 27001, DORA, HIPAA, or FedRAMP</li><li>
Familiarity with threat intelligence operationalization (CrowdStrike CAO/Intel, MITRE ATT&amp;CK, adversary tracking)</li></ul>
Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below. We anticipate this job posting will be posted until 08/31/2026. Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here:
U.S. Employee Benefits | Accenture
Role Location Annual Salary Range California $70,350 to $205,800 Cleveland $59,100 to $164,600 Colorado $63,800 to $177,800 District of Columbia $68,000 to $189,300 Illinois $59,100 to $177,800 Maine $54,400 to $151,400 Maryland $63,800 to $177,800 Massachusetts $63,800 to $189,300 Minnesota $63,800 to $177,800 New York $66,300 to $205,800 New Jersey $68,000 to $205,800 Virginia $59,100 to $189,300 Washington $80,200 to $189,300</div>
 <div>Chicago, IL</div>
 <div>Requesting an Accommodation

Accenture is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.

If you would like to be considered for employment opportunities with Accenture and have accommodation needs such as for a disability or religious observance, please call us toll free at 1 (877) 889-9009 or send us an email or speak with your recruiter. 


Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities. 


Accenture is an EEO and Affirmative Action Employer of Veterans/Individuals with Disabilities.

Accenture is committed to providing veteran employment opportunities to our service men and women. 


Other Employment Statements

Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.

Candidates who are currently employed by a client of Accenture or an affiliated Accenture business may not be eligible for consideration.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Further, at Accenture a criminal conviction history is not an absolute bar to employment. 
 
The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.

California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please for additional important information.

Please read Accenture&rsquo;s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.</div>
 <div>We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.

We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.

At Accenture, we see well-being holistically, supporting our people&rsquo;s physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We&rsquo;re proud to be consistently recognized as one of the World&rsquo;s Best Workplaces&trade;.

Join Accenture to work at the heart of change. Visit us at www.accenture.com.</div>

Crowdstrike Technical Consultant

Zachry Group

<div>
 
 Job Description
 
 
 
 
 Position Synopsis
 
 : Individual will be relied upon to perform a variety of cyber security implementation and/or assessment activities involving power plant upgrades and/or new power plant projects. The individual will assist with planning, organizing, and preparing all activities related to cyber security when modifications are made at nuclear power facilities. This includes the development of DA/CDA lists, CDA assessments, performance of cyber security walkdowns, cyber security testing, and Cyber Security Assessment Team (CSAT) presentations. The individual will become familiar with codes and standards applicable to the nuclear power industry as well as possess a working knowledge of applicable NRC regulations. Typical activities include developing specifications and/or modification packages, defining design scope, developing design criteria documents, identifying, and selecting equipment, and configuration and testing of digital devices. The individual must be able to work on project teams with other engineers to evaluate conditions as well as proposed modifications which will improve plant performance, safety, and reliability. The individual will receive close supervision on unusual or difficult problems and general review of all aspects of work.
 
 
 
 Responsibilities
 
 
 
 
 Education Required (minimum):
 
 BS in Computer Science or equivalent. Cyber Certifications with additional experience will also be considered.
 
 
 
 Experience Required (minimum)
 
 : Minimum 10 years of experience in an engineering environment. Knowledge of cyber security concepts in the nuclear industry is required. 3 years of experience at a working nuclear plant with plant systems training specific to the site. Proficient in performing cyber documentation for critical digital assets. Capable of being responsible and leading cyber work for associated design engineering projects. Leading and representing ZNE at CSATs and project team meetings involving cyber decisions and deliverables. Has performed cyber security walkdowns during implementation phase of projects. Has previously held a Cyber Security Specialist (CSS) qualification at a nuclear facility.
 
 
 
 Submittal Requirements:
 
 Resume and cover letter are to be emailed to employmentcontact@zachrynuclear.com.
 
 
 
 Posting Requirements
 
 : This posting will be available from the Posted Date to the Removal Date period. Resumes received after the Removal Date (noted above) will not be considered.
 
 
 
 Note: Relocation assistance is not available for this position
 
 .
 
 
 
 Qualifications
 
 
 
 
 Other Required Qualifications (minimum)
 
 : All applicants must possess excellent verbal and written communication skills and can effectively present technical topics. Proficient with Microsoft Office software; Word, Excel, Visio, PowerPoint, etc. as well as competency in software applications for email and databases. Effective time management skills are required. Ability to pass security and drug screening and maintain unescorted nuclear plant access is required. Successful candidate will be required to understand and comply with company policies, procedures and processes. Overtime work is required. Travel is required to client sites with occasional periods of field/office work.
 
 
 
 Desired Qualifications:
 
 MS in Computer Science, Computer Information Systems, or Computer Engineering. Holds a current qualification to write cyber security assessments [e.g., Cyber Security Specialist (CSS)] with an existing licensed nuclear facility. Currently badged and is a member of a critical group of an existing licensed nuclear facility.
</div>

Cyber Security Specialist IV

ThoughtFocus

<div><div>Contract to Hire : Cyber Security Consultant for SOC-2 Type-II Implementation for a Banking project :</div> 
<div></div> 
<h2 class="jobSectionHeader">Role Summary</h2>
<div>We are seeking a Senior Technical Lead to drive the technical implementation and operational readiness of our SOC 2 Type II compliance program. The role will partner closely with Security, Engineering, DevOps, IT, Product, Legal, and external auditors to design, implement, automate, and continuously monitor controls across the organization. Similar roles typically involve owning evidence readiness, control mapping, remediation tracking, and auditor support across SOC 2 Trust Services Criteria.linkedin+2</div>
<h2 class="jobSectionHeader">Key Responsibilities</h2>
<ul><li>Lead end-to-end technical execution of the SOC 2 Type II implementation program.</li>
<li>Map existing systems, processes, and controls to SOC 2 Trust Services Criteria.</li>
<li>Identify control gaps and drive remediation plans with engineering and operations teams.</li>
<li>Design and operationalize technical controls for access management, MFA, logging, monitoring, encryption, vulnerability management, backup, incident response, change management, and secure SDLC.</li>
<li>Build scalable evidence collection and continuous compliance workflows.</li>
<li>Coordinate auditor walkthroughs, evidence requests, and responses.</li>
<li>Maintain control narratives, policies, procedures, and audit artifacts.</li>
<li>Track remediation tasks, risks, exceptions, and compliance milestones.</li>
<li>Collaborate with stakeholders to ensure controls are sustainable in cloud-native and SaaS environments.</li>
<li>Support awareness, training, and readiness activities across teams.</li>
<li>Recommend automation opportunities to reduce manual compliance effort.linkedin+3</li>
</ul><h2 class="jobSectionHeader">Required Qualifications</h2>
<ul><li>8+ years of experience in technical leadership, security engineering, infrastructure, DevOps, or cloud engineering.</li>
<li>Hands-on experience supporting SOC 2 Type II, ISO 27001, or similar assurance/compliance programs.</li>
<li>Strong understanding of cloud security, IAM, logging, monitoring, encryption, CI/CD, and vulnerability management.</li>
<li>Experience working with auditors, cross-functional teams, and evidence collection workflows.</li>
<li>Ability to translate compliance requirements into technical controls and operational processes.</li>
<li>Familiarity with SaaS, cloud-native, and modern software delivery environments.</li>
<li>Excellent documentation, stakeholder management, and program coordination skills.</li>
</ul><h2 class="jobSectionHeader">Preferred Qualifications</h2>
<ul><li>Experience with compliance automation tools such as Vanta, Drata, or similar platforms.</li>
<li>Knowledge of NIST, CIS, ISO 27001, or other security frameworks.</li>
<li>Experience with risk assessments, control testing, and remediation tracking.</li>
<li>Background in secure SDLC, DevSecOps, and cloud architecture.</li>
<li>Exposure to privacy, vendor risk management, and business continuity controls.linkedin+2</li>
</ul><h2 class="jobSectionHeader">Core Deliverables</h2>
<ul><li>SOC 2 Type II readiness plan and implementation roadmap.</li>
<li>Control matrix mapped to TSC requirements.</li>
<li>Evidence repository and recurring collection process.</li>
<li>Audit-ready documentation and narratives.</li>
<li>Gap remediation tracker and risk register.</li>
<li>Reporting dashboard for leadership and auditors.</li>
</ul><h2 class="jobSectionHeader">Nice-to-Have Impact Areas</h2>
<ul><li>Automating evidence collection from cloud, identity, CI/CD, and ticketing systems.</li>
<li>Embedding compliance checks into release pipelines.</li>
<li>Standardizing policies and operational procedures.</li>
<li>Building a repeatable compliance operating model for future audits and certifications.</li></ul></div><div></div>

Senior Engineer

Search 5615+ Cyber security consultant jobs near you this August. New roles added regularly across leading industries. Apply today.