information security consultant

Burraq Consulting

<div><div><div>Expired on: May 31, 2026</div></div><div><div><div><div>
Job Category: Remote
</div><div>Job Type: Freelance
</div><div>Job Location: Pakistan
</div><div>Salary: Project Based
</div><div>Experience: 5 Years
</div><div>Department: Auditing and Compliance
</div><div>Education: Masters in Cyber Security
</div></div></div></div><div><h3 class="jobSectionHeader">About Us</h3>

Burraq Consulting is a leading training and consultancy firm in Pakistan, delivering professional services in HSE, ISO certifications, corporate training, and compliance solutions. We are expanding our technical team and looking for a Senior Information Security Consultant who can conduct ISO 27001 audits and meet the ISO requirements for our clients.
<div>
</div><h3 class="jobSectionHeader">Job Overview</h3>

We are seeking experienced ISO 27001 Consultants to support multiple client engagements on a project-to-project basis. The consultant will be responsible for implementing, auditing, and maintaining Information Security Management Systems (ISMS) in line with ISO 27001 requirements.

This role is ideal for professionals who prefer flexible, assignment-based work and have hands-on experience delivering ISO 27001 certification projects across different industries.
<div>
</div><h3 class="jobSectionHeader">Key Responsibilities</h3>
<ul><li>Lead end-to-end ISO 27001 implementation projects</li>
<li>Conduct gap assessments against ISO/IEC 27001 standards</li>
<li>Develop and review ISMS documentation (policies, procedures, risk registers, SoA, etc.)</li>
<li>Perform risk assessments and risk treatment planning</li>
<li>Provide guidance on Annex A controls implementation</li>
<li>Conduct internal audits and support clients during certification audits</li>
<li>Deliver awareness and training sessions to client teams</li>
<li>Liaise with certification bodies and external auditors</li>
<li>Ensure project timelines, deliverables, and quality standards are met</li>
</ul><h3 class="jobSectionHeader">Requirements</h3>
<ul><li>Proven experience in ISO/IEC 27001 implementation or consulting</li>
<li>Strong understanding of ISMS framework and risk management methodologies</li>
<li>Experience with Statement of Applicability (SoA) and control mapping</li>
<li>Familiarity with ISO 27001:2022 standard (preferred)</li>
<li>Lead Implementer and/or Lead Auditor certification (highly preferred)</li>
<li>Ability to manage multiple clients and projects independently</li>
<li>Strong documentation and communication skills</li>
</ul><h3 class="jobSectionHeader">Preferred Skills</h3>
<ul><li>Experience in related standards (e.g., ISO 22301, ISO 20000, GDPR)</li>
<li>Background in IT, cybersecurity, or information security</li>
<li>Experience working with certification bodies</li>
<li>Industry exposure (e.g., IT, healthcare, finance, telecom)</li>
</ul><h3 class="jobSectionHeader">Engagement Model</h3>
<ul><li>Project-based assignments with defined scope and timelines</li>
<li>Flexible working arrangements (remote or on-site depending on client needs)</li>
<li>Compensation based on project scope, complexity, and duration</li>
</ul><h3 class="jobSectionHeader">How to Apply</h3>

Interested candidates are encouraged to submit their CV along with a portfolio of recent design work to: people@burraqconsulting.com with subject line &ldquo;Information Security Consultant&ldquo;.</div></div>

Senior Information Security (ISO 27001) Consultant

Protiviti Middle East Member Firm

<div>
 
 
 Consultant-Cyber Security
 
 
 
 
 
 
 
 
 Role Objective
 
 
 
 The Firm is seeking to recruit bright and passionate individuals (Consultant) who have relevant work experience and skills in IT Consulting. The role will primarily involve executing or managing client engagements.
 
 
 
 
 
 
 Desired profile:
 
 
 <ul>
 <li>
 2-4+ years&rsquo; experience in Information Security and related functions such as ISO 27001, NESA, ISR, NIST CSF and Cybersecurity Risk Management
 </li>
 <li>
 Qualification &ndash; BE, CA, MBA (desirable)
 </li>
 <li>
 Certifications (desirable) &ndash; CISA, CISSP, PMP, ISO 27001
 </li>
 <li>
 Experience in the areas of Network Design, Infrastructure Audit, IT Security, Vulnerability Assessment, Risk Assessment, Web Applications Security and Source Code review.
 </li>
 <li>
 Experience in the areas of SOC, Security incident and Event Management
 </li>
 <li>
 Experience in implementation of SOC, Security incident and Event Management
 </li>
 <li>
 Implementation experience of various security technology such as PIM, DLP and IDM.
 </li>
 <li>
 Knowledge and experience in the areas of one or more Operating Systems, Databases maintenance, hardening, testing and security management.
 </li>
 <li>
 Understanding and knowledge of network and networking components including maintenance, hardening, testing and security management.
 </li>
 <li>
 Vulnerability assessment of System and Physical infrastructure including penetration testing of networks and web applications using third party &amp; open source tools.
 </li>
 <li>
 Experience in the areas of establishing procedures and policies for the design, installation and commissioning of the Systems infrastructure.
 </li>
 <li>
 Industry domain knowledge from BFSI, Capital markets, telecom, IT/ITES, Service etc. would be an added advantage
 </li>
 <li>
 Excellent knowledge of Information Security technologies and methodologies particularly, including for example web server security / firewalls / networks / encryption / PKI / TCP/IP / UNIX / Windows etc.
 </li>
 <li>
 Knowledge in one or more scripting language like perl/php/python/bash OR one or more programming languages like C/C++/Java
 </li>
 <li>
 Strong knowledge and experience in ISMS/BCMS implementation would be an added advantage
 </li>
 <li>
 Experience of information security standards such as: ISO 27001, ISO 22301, PCI DSS, GDPRl,ITIL, COBIT would be an added advantage
 </li>
 <li>
 Proficient in Microsoft Office suite applications
 </li>
 </ul>
 
 
 
 
 
 Key Personal Attributes
 
 
 <ul>
 <li>
 Client facing experience is desirable and added advantage
 </li>
 <li>
 Interpersonal skills to interact in team environment and foster client relationships
 </li>
 <li>
 Ability to communicate technical risk issues effectively, to customers who may, at times, have a non-technical background
 </li>
 <li>
 Ability to write technical reports, detailed presentations and documentation
 </li>
 <li>
 Demonstrated understanding of the importance of business ethics
 </li>
 <li>
 Sound job administration skills
 </li>
 <li>
 Must be able to handle highly confidential information in a strictly professional manner
 </li>
 <li>
 Must be able to maintain professional demeanor in times of high stress
 </li>
 <li>
 Open to travel as per the job requirements. It would depend upon the assignment as well.
 </li>
 </ul>
 
 
 
</div>

Cyber Security Consultant

Google

<div>
 
 Minimum qualifications:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
 </li>
 <li>
 Certification in one or more of the following: CompTIA Security+, CompTIA Network+, ISC2 (CISSP), SANS-GIAC certification (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN, GWAPT), Cisco (CCNA), or EC-Council (CEH, LPT).
 </li>
 <li>
 5 years of experience assessing and developing cybersecurity solutions across multiple security domains.
 </li>
 <li>
 Experience managing incident response activities.
 
 
 </li>
 </ul>
 
 Preferred qualifications:
 
 
 
 <ul>
 <li>
 Experience developing executive stakeholder client relationships to achieve project/long-term objectives.
 </li>
 <li>
 Understanding of security controls for common platforms and devices, including Linux and network equipment.
 </li>
 <li>
 Ability to communicate in Arabic fluently as this is a client facing role.
 </li>
 <li>
 Excellent written and verbal communication skills.
 
 
 </li>
 </ul>
 
 About the job
 
 As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
 
 
 As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Identify issues in customer Cyber Defense Centers, formulate strategies for improvement, plan the implementation of improvements, and execute or oversee plans to completion.
 </li>
 <li>
 Advise on Cyber Defense Center, Computer Security Incident Response Team, and Security Operations Center management activities, including technical solutions.
 </li>
 <li>
 Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operations Center incident detection and response capabilities.
 </li>
 <li>
 Develop client relationships with executive stakeholders to achieve projects and objectives; engage and collaborate with client stakeholders within the customer environment to drive resolution for security issues.
 
 
 
 </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>

Cyber Defense Principal Analyst, Mandiant, Google Cloud

<div><h3 class="jobSectionHeader">Minimum qualifications:</h3><ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.</li>
<li>Certification in one or more of the following: CompTIA Security+, CompTIA Network+, ISC2 (CISSP), SANS-GIAC certification (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN, GWAPT), Cisco (CCNA), or EC-Council (CEH, LPT).</li>
<li>5 years of experience assessing and developing cybersecurity solutions across multiple security domains.</li>
<li>Experience managing incident response activities.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Experience developing executive stakeholder client relationships to achieve project/long-term objectives. 
</li>
<li>Understanding of security controls for common platforms and devices, including Linux and network equipment.</li>
<li>Ability to communicate in Arabic fluently as this is a client facing role.</li>
<li>Excellent written and verbal communication skills. 
</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats. 
 
As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Identify issues in customer Cyber Defense Centers, formulate strategies for improvement, plan the implementation of improvements, and execute or oversee plans to completion.</li>
<li>Advise on Cyber Defense Center, Computer Security Incident Response Team, and Security Operations Center management activities, including technical solutions.</li>
<li>Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operations Center incident detection and response capabilities.</li>
<li>Develop client relationships with executive stakeholders to achieve projects and objectives; engage and collaborate with client stakeholders within the customer environment to drive resolution for security issues.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Confidential Government

<div>
 
 We are seeking an Application Security Consultant to secure the development lifecycle and protect the organization's software products.
 
 
 
 
 
 Role Overview:
 
 
 A specialist role focused on embedding security into the code, ensuring application-layer defense across web and mobile platforms.
 
 
 Core Purpose: To ensure all software products are built securely from the ground up, preventing common vulnerabilities like OWASP Top 10.
 
 
 
 
 
 Key Responsibilities:
 
 <ul>
 <li>
 Conduct regular static and dynamic application security testing (SAST/DAST).
 </li>
 <li>
 Lead secure code reviews and provide remediation guidance to development teams.
 </li>
 <li>
 Manage the security of APIs and microservices across distributed environments.
 </li>
 </ul>
 
 
 
 
 Qualifications:
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Software Engineering, or related technical field.
 </li>
 <li>
 5+ years of experience in AppSec or Software Development with a security focus.
 </li>
 <li>
 Certifications: CSSLP or CASE.
 </li>
 <li>
 Competencies: Mastery of secure coding practices and experience with modern web/cloud architectures.
 </li>
 </ul>
 
 
</div>

Application Security Consultant

First Abu Dhabi Bank (FAB)

<div>
 
 
 JOB PURPOSE:
 
 
 
 The
 
 
 Manager &ndash; Information Security will be responsible for managing FAB Kuwait&rsquo;s Information Security, Business Continuity and Data Privacy Program. He/She serves as the process owner of the appropriate second-line functional activities related to confidentiality, integrity, availability of Information assets in addition to Data Privacy and Buiness continuity as well third party risk management and physical security in compliance with regulatory requirements.
 
 
 
 
 
 The role will report directly to the Head of Risk &ndash; Kuwait and functionally to the Head of International Information Security at the Group, and shall be responsible to plan, implement, monitor and review the information security program for FAB Kuwait in consultation with Group Information Security Office &ndash; Head office team. The Manager &ndash; Information Security shall ensure the information security program, Data Privacy program and Business Continuity Management Program is in alignment with the regulatory, legal and statutory requirements of FAB Kuwait and the business strategy. The Manager &ndash; Information Security role will be operating out of the FAB Kuwait branch.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 <ul>
 <li>
 Review and Maintain Information Security, Buisness Contnuity and Data Privacy Policies, Standards, and Procedures for FAB Kuwait.
 </li>
 <li>
 Participate in discussions and coordinate activities between local business units, support functions, Compliance Team, IT and GSO &ndash; HO for information security and Data Privacy, related planning, implementations and review.
 </li>
 <li>
 Ensure compliance as per regulatory requirements (all Information Security / Bsiness Continuity/ Personal Data Protection specific regulations applicabe to FAB Kuwait / Third party risk management / Physical security .).
 </li>
 <li>
 Provide regular reporting on the status of information security program, initiatives, security &amp; technology risks and relevant incidents to the executive management.
 </li>
 <li>
 Laise with external agencies such as regulatory/advManager - Information Securityry/law enforcement bodies, as necessary, to ensure that the FAB Kuwait maintains a strong security posture and is kept well abreast of relevant threats identified by these agencies.
 </li>
 <li>
 Review new regulatory legislations; promptly communicate all regulatory notices/circulars to all concerned areas, provide interpretations if necessary; develop/monitor action plans towards its implementation.
 </li>
 <li>
 Assist Head office during Regulatory Examinations; ensure implementation/regularization of observations linked to compliance while meeting the deadline(s).
 </li>
 <li>
 Review Technology Risk Assessments for IT Projects, RCSA , Third party and Facility Risk assessments.
 </li>
 <li>
 Assist and support for Internal and External Audits. Monitor and track all open infosec issues with IT and concerned stakeholders.
 </li>
 <li>
 Oversee the tracking and closure of Security, BCM &amp; Privacy related Audit findings of FAB Kuwait.
 </li>
 <li>
 Govern the security awareness program for FAB Kuwait staff and customers.
 </li>
 <li>
 Provide support to FAB CSIRT and Group Data privacy for information security incident response and personal data breach handling.
 </li>
 <li>
 Provide SLOD oversight and support the business unit on the implementation of business continuity program in line with local regulatory requirements and Group BCM framework practices and RACI.
 </li>
 <li>
 Coordination with Business units/Fraud Risk / GSO for digital forensic investigation.
 </li>
 <li>
 Review and assess the regulatory circulars/notices, discuss with GSO-HO and enforce security controls as applicable.
 </li>
 <li>
 Assist Group Information Security Office&ndash; Head Office team in delivery of information security services to the branch such as vulnerability assessment, penetration testing, SOC monitoring etc.
 </li>
 <li>
 Review Management Dashboards/Security MIS related to Patching, VA, PT, Baselines and end point security controls and highlight risks to the branch executive management.
 </li>
 <li>
 Assess and Review Change Requests and Security Exceptions for FAB Kuwait.
 </li>
 <li>
 Review BRDs, Solution Design, Product Papers from Information Security, Data Privacy and Busines Continuity perspective and any other requirements for FAB Kuwait business units.
 </li>
 <li>
 Review and track compliance for Data Privacy and Protection controls.
 </li>
 <li>
 Review KPI and KRI for country information security processes.
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS &amp; EXPERIENCE:
 
 
 <ul>
 <li>
 Information Security or IT Security or IS Audit background.
 </li>
 <li>
 Must be having a minimum 5-7 years of Information Security Experience.
 </li>
 <li>
 Expert knowledge of Information Security Domains and should be certified (CISA, CISSP or CISM or any other relevant security certification).
 </li>
 <li>
 Experience in a similar type of role in a multinational business and dealing with regulatory authorities, governments and industry bodies.
 </li>
 <li>
 Experience in managing security compliance teams.
 </li>
 <li>
 Knowledge of CBK regulatios on Cyber security, Business continuity, &amp; local privacy regulations.
 </li>
 <li>
 Ability to comply with Data Privacy Policy / procedures, draft / update local Data Privacy Polcies. Review local Business initiatives and SOPs where required, for compliance with Data Privacy Compliance requirements in co-ordination with H.O. Teams.
 </li>
 <li>
 Ability to make good judgments regarding security risk and to prioritize resources and activity around managing those risks.
 </li>
 <li>
 Able to conduct the role independently and with integrity.
 </li>
 <li>
 Ability to plan, organize and prioritize tasks and projects.
 </li>
 <li>
 Good personal communication skills capable of dealing with wide range of stakeholders, including senior management.
 </li>
 <li>
 Fluent (spoken and written) in English, Arabic.
 </li>
 </ul>
</div>

Manager – Information Security - Kuwait

VeraSafe

<div>
 
 
 About VeraSafe:
 
 
 
 VeraSafe is an innovative and successful U.S. headquartered privacy and cybersecurity compliance consulting firm and law firm. Due to rapid growth and increased demand for our international privacy and technology compliance and legal services, VeraSafe is seeking creative, motivated, and collaborative IT security experts to join our team. This is a fully remote position.
 
 
 
 
 
 
 Watch / listen to learn more about VeraSafe: Check out our podcast!
 
 
 
 
 Apple Podcast
 
 :
 
 https://apple.co/4b28hwE
 
 
 
 
 YouTube
 
 :
 
 https://www.youtube.com/@PrivacyInPractice/videos
 
 
 
 
 Spotify:
 
 
 https://bit.ly/4moSMU7
 
 
 
 
 
 
 VeraSafe is proud to be
 
 certified as a Great Place to Work&copy;, with 97% of our employees affirming that we are truly a great place to work
 
 . This means we foster trust, collaboration, and a positive work environment. We are committed to maintaining this standard of meaningful work, work-life balance, and a supportive community. Check out our great benefits, which are listed at the end of this job description.
 
 
 
 
 
 
 About the Role:
 
 
 
 VeraSafe&rsquo;s mission: Provide the world&rsquo;s best data protection advice, with a human touch. Right now, we are seeking an IT Security Advisor to join our growing team and help us pursue this mission.
 
 
 
 
 
 Our clients vary in size, location, industry, and service needs, and they love the way we advise on privacy compliance. They love our work so much, in fact, that there is a growing demand for our cybersecurity consulting (hence the need for you!).
 
 
 
 
 
 This is an excellent opportunity for anyone who wants to join a team working on the cutting edge of privacy, data protection, and cybersecurity, and is excited about assisting a wide range of clients with fractional CISO-type support, including IT security program design, implementation, and management.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Practice Development:
 
 
 <ul>
 <li>
 Serve as an integral part of VeraSafe&rsquo;s cybersecurity consulting practice area through the management of client relationships and both individual and team projects/deliverables.
 </li>
 <li>
 Expand on VeraSafe&rsquo;s security consulting offerings, including&mdash;but certainly not limited to&mdash;Microsoft 365 hardening, configuration auditing, and risk assessment.
 </li>
 <li>
 Further develop internal service delivery methodologies, documentation, templates, and quality control processes.
 </li>
 </ul>
 
 
 
 
 
 Client Engagement and Delivery:
 
 
 <ul>
 <li>
 Handle consulting projects, including fractional-CISO-type engagements, with a strong focus on securing Microsoft 365 environments.
 </li>
 <li>
 Conduct detailed cybersecurity risk assessments, including analysis of current security controls, vulnerabilities, and threat landscape.
 </li>
 <li>
 Provide oversight and strategic direction for incident response, including breach containment, investigation, and post-incident review.
 </li>
 <li>
 Lead and execute security assessments, architecture reviews, IT security policy drafting and implementation, and remediation planning.
 </li>
 <li>
 Communicate findings and recommendations to clients clearly and professionally either through written reports and executive briefings or execution of hands-on implementation.
 </li>
 <li>
 Build trusted relationships with client stakeholders, including CISOs, IT directors, and compliance teams.
 </li>
 <li>
 Collaborate with project managers and privacy-focused project teams to determine and meet client requirements and specific project needs. Analyze practical situations and develop solutions to specialized needs.
 </li>
 </ul>
 
 
 
 
 
 Thought Leadership and Cross-Functional Collaboration:
 
 
 <ul>
 <li>
 Stay current on evolving security threats and technologies.
 </li>
 <li>
 Represent our IT security practice internally and externally, including contributions to client alerts and conference talks.
 </li>
 <li>
 Collaborate with VeraSafe&rsquo;s Professional Services team to ensure tight integration between our IT security and privacy advisory services.
 </li>
 </ul>
 
 
 
 
 
 Required Qualifications:
 
 
 <ul>
 <li>
 At least four years of hands-on experience in IT security consulting, IT security engineering, or equivalent.
 </li>
 <li>
 At least one relevant certification (e.g., CISA, CISSP, CISM, CRISC, CCSP, SC-100 Cybersecurity Architect).
 </li>
 <li>
 Deep technical expertise in Microsoft Defender XDR, CrowdStrike Falcon, SentinelOne, or other similar technologies.
 </li>
 <li>
 Proficiency with IT security standards and frameworks (e.g., NIST CSF, ISO/IEC 27001, NIST 800-53, NIST 800-171, CIS Controls).
 </li>
 <li>
 Experience performing audit readiness assessments for frameworks, laws, and regulations (e.g., POPIA, HIPAA, ISO, NIST, GLBA).
 </li>
 <li>
 Technical background in scripting, automation, or security tooling (e.g., PowerShell, Sentinel, Defender for Endpoint).
 </li>
 <li>
 Experience developing and conducting tabletop exercises such as Business Continuity and Disaster Recovery scenarios.
 </li>
 <li>
 Experience conducting enterprise-wide formal risk assessments.
 </li>
 <li>
 Strong understanding of email security (e.g., DKIM, DMARC, SPF).
 </li>
 <li>
 Familiarity with security stacks (e.g., SIEM/SOAR, IAM, EDR, CASB).
 </li>
 <li>
 Strong understanding of cloud security posture assessments.
 </li>
 <li>
 Strong understanding of enterprise security principles, zero trust architecture, and IT security risk management.
 </li>
 <li>
 Excellent client-facing communication and report writing skills.
 </li>
 <li>
 Team player, interested in contributing to a growing enterprise.
 </li>
 <li>
 Strong writing/editing skills and attention to detail.
 </li>
 <li>
 Willingness to learn new skills and receive direction and feedback from team members.
 </li>
 <li>
 Willingness to pursue and maintain privacy certifications (e.g., CIPP/E, CIPM, CIPT).
 </li>
 <li>
 Willingness to work occasional evenings, primarily for full team meetings or essential client work.
 </li>
 </ul>
 
 
 
 
 
 Preferred Qualifications:
 
 
 <ul>
 <li>
 Experience working directly with clients, in a service-oriented environment.
 </li>
 <li>
 Experience building or growing a consulting practice or service line.
 </li>
 <li>
 Experience in regulated industries (e.g., healthcare, finance, pharma).
 </li>
 <li>
 Familiarity with contract provisions that address data protection and security responsibilities.
 </li>
 <li>
 Experience migrating or overseeing the migration of systems from on-premises or hybrid to cloud-federated systems.
 </li>
 <li>
 Experience with development and implementation of incident response plans.
 </li>
 <li>
 Professional involvement in the privacy and/or data security space (attendance at privacy conferences; membership or publication in the IAPP, ISACA, etc.).
 </li>
 <li>
 Privacy certification (or similar).
 </li>
 </ul>
 
 
 
 
 
 Immediate Supervisor:
 
 
 
 Senior Vice President and Head of Professional Services
 
 
 
 
 
 
 Key Competencies:
 
 
 <ul>
 <li>
 Detail-oriented and highly organized with a strong work ethic.
 </li>
 <li>
 Ability to thrive and perform in a fully remote and international environment.
 </li>
 <li>
 Excellent written and verbal communication skills.
 </li>
 <li>
 Highly skilled in time management to enable successful work with international teams in meeting deadlines.
 </li>
 <li>
 Highly capable of independent work to fully deliver on all commitments.
 </li>
 <li>
 Ability to work productively in a cross-functional, multi-disciplinary consulting team.
 </li>
 <li>
 Experience building and maintaining relationships with colleagues and clients through polished, professional interactions and products regardless of the client&rsquo;s experience with VeraSafe&rsquo;s service line.
 </li>
 </ul>
 
 
 
 
 
 VeraSafe Values:
 
 
 
 In addition to technical knowledge, skills, and competencies for a specific position, VeraSafe seeks team members who are proficient in values critical to our organization. We are seeking individuals who demonstrate interest in and experience applying creativity, feedback, and business acumen in a welcoming culture that recognizes what each individual contributes to our team.
 
 
 
 
 
 
 VeraSafe&rsquo;s Excellent Benefits Include:
 
 
 <ul>
 <li>
 Work from almost anywhere with Wi-Fi
 </li>
 <li>
 Paid Time Off (PTO)
 </li>
 <li>
 Paid holidays
 </li>
 <li>
 Annual bonuses
 </li>
 <li>
 Membership in the International Association of Privacy Professionals (IAPP) and IAPP exam fee reimbursement (CIPP/E)
 </li>
 <li>
 Flexible working schedule in some roles
 </li>
 <li>
 Reimbursement for certain personal flight ticket
 </li>
 <li>
 Company laptop provided
 </li>
 </ul>
 
 
 
 
 
 Other Benefits:
 
 
 <ul>
 <li>
 Tremendous professional development growth opportunities in the privacy, data protection, and cybersecurity niche.
 </li>
 <li>
 The chance to have a long-lasting effect on a small but growing international business.
 </li>
 <li>
 Work in an open environment with a team that respects your ideas and contributions.
 </li>
 <li>
 Occasional opportunities to travel in North America and Europe.
 </li>
 </ul>
 
 
 
 
 
 Our HR Privacy Notice is available at the following link:
 
 
 
 
 https://verasafe.com/legal/human-resources-privacy-policy/
 
 
 
 
 
 
 
 Note:
 
 
 
 There are several steps to our recruitment process, each carefully crafted over the span of our 16 years in operations, to best ensure you and VeraSafe are a strong match &ndash; we want to hire team members who will thrive by being a part of our team! We recognize the investment of time can be a burden, but we think it&rsquo;s worth it, and we appreciate you taking the time to complete it. We&rsquo;ve found it enables us to find the best team members, regardless of their experience, where they went to school, or where they were trained. We want smart, kind, creative colleagues, plain and simple, and our process is a crucial part of our ability to hire this way.
 
</div>

IT Security Advisor (Full Time, Remote Position)

Search 10000+ Information security consultant jobs near you this June. New roles added regularly across leading industries. Apply today.

10000 information security consultant jobs Near Me

Senior Information Security (ISO 27001) Consultant

Cyber Security Consultant

Cyber Defense Principal Analyst, Mandiant, Google Cloud

Cyber Defense Principal Analyst, Mandiant, Google Cloud

Application Security Consultant

Manager – Information Security - Kuwait

IT Security Advisor (Full Time, Remote Position)