GRC Cyber Consultant

Requirements: 3+ years in IT security and compliance Extensive, practice-based knowledge of security management frameworks, such as ISO 27k series, GDPR, SOC2 etc.; Proven track record of IT security audits/projects implementation Ability to develop information security policies, setup ISMS and guidelines, implement CIS20 and derive security requirements from them; Understanding access modelling. Ability to develop access models and assess them. Understanding of segregation of duties Experience in IAM & SSO solutions. Understanding of purpose and approaches of IAM. Knowledge of key tasks: identify, authenticate, and authorize Good knowledge of risk management, its purpose, and approaches. Ability to evaluate risks and create a risks management plan Understanding OWASP Top 10. Ability to describe vulnerabilities, ways of exploitations, and fix methods Understanding and implemented of vulnerability & patch management. Knowledge in vulnerability scanners. Ability to validate scan results and provide recommendations Ability to develop and conduct security trainings and workshops Good level of professional English Good communication skills, responsible, initiative, self-organized, eager to learn Experience in Secure SDLC or AWS Security would be a plus Responsibilities: Conduct security audits and consulting projects, create an action plan & practical roadmap based on the audit results Develop and enhance an information security management framework to ensure business sustainability Build and maintain compliance guidelines. Create policies and standards for IT security and compliance Conduct general IT security awareness training for the company staff Evaluate and manage corporate risks related to IT security Build and maintain application-specific threat models, explicitly apply security principles to design Participate in the corporate certification and compliance activities Design and implement security architecture and detailed cybersecurity designs together with IT and software development departments Prepare and document standard operating procedures and protocols Cooperation with Account Management, Sales & Marketing, Legal, Delivery and Clients for all security-related topics (audits, contractual compliance, reviews, risk assessments, etc.) Keeping up to date with developments in IT security standards and threats