Information Security Consultant

Your Role

As Senior Information Security Engineer, you will be responsible for the information security and risk management program. You will be primarily responsible for the design, implementation, management, and operations of security controls and systems to protect the confidentiality, integrity, and availability of Clients information assets and improve our cyber-maturity

What You Will Do

• Collaborate with technology (hardware, software, ICT) and business teams to implement Infosec governance, security controls, and risk management programs aligned with best practices.
• Own and drive information security strategy, ensuring confidentiality, integrity, and availability of services.
• Lead the Information Security Program, including risk management, threat modeling, compliance, and technical controls.
• Develop disaster preparedness protocols, conduct tests, monitor security tools, and lead incident management.
• Supervise IT Security Officers and in-house SOC Analysts, providing leadership and guidance.
• Identify and mitigate Infosec risks, improve risk posture, and establish residual risk assessment processes.
• Review and enhance Infosec policies, standards, and frameworks; ensure compliance organization-wide.
• Conduct security audits, lead data protection initiatives, and manage vulnerability assessments and remediation efforts.
• Provide technical Infosec support throughout the software development lifecycle, including secure coding, code reviews, and automated testing in DevOps pipelines.
• Recommend and implement security architecture plans and deliver secure coding training for developers.
• Define enterprise-wide security blueprints and standardize practices across departments and country IT teams.
• Participate in Infosec budgeting and lead project management to ensure the timely delivery of security initiatives.

What You Will Bring

• University degree in relevant fields like Information Technology, engineering or cyber security
• 5+ years of experience in a similar role, with a demonstrated track record of success
• Practical understanding of Infosec, risk and compliance standards, frameworks, and best practices. A professional certification is an added advantage (e.g., CISSP, CISA, CISM, CRISC, ISO 27001)
• Management experience of leading and mentoring Infosec or technology teams and comfortable working in a fast-paced and highly collaborative team environment is beneficial.
• General understanding and knowledge of regulatory requirements, security concepts, Information security governance, data protection, and privacy laws and regulations.
• Hands-on leader who is technically savvy and can balance best practice with pragmatism
• Experience designing and implementing ICT strategy, roadmap, policies, procedures, and standards
• Experience with cloud platforms (Preferably AWS)
• Experience with vulnerability mitigation strategies, detection tools, techniques, and remediation.
• Experience with security tools, forensic tools, NAC, Antivirus, File Integrity Management, Intrusion Prevention, Network and Application Firewalls, Web Proxy, SIEM, and DLP solutions.
• Analytical thinker with the ability to partner with management, technical team, and external stakeholders to resolve complex security matters and develop policies, processes and guidelines.
• Excellent communicator, detail-oriented with the ability to manage shifting and competing priorities.
• Self-driven and strongly motivated with an ownership mindset and a can-do attitude