Security Consultant

Roles & Responsibilities :

security testing and Governance, Risk, and Compliance (GRC)

Key Responsibilities:

Security Testing:

• penetration testing and vulnerability assessments

• Burp Suite, Metasploit, Nmap, Nessus

• Simulate real-world cyberattacks to evaluate system resilience and generate actionable remediation insights.

• Secure Development Lifecycle (SDL)

• Collaborate with application, DevOps, and infrastructure teams to validate fixes and improve security controls.

GRC Responsibilities:

• security policies, procedures, and controls

• risk assessments

• ISO 27001, NIST, PCI-DSS, GDPR

• internal/external audits

• embed security into processes and projects

• privacy impact assessments

Required Skills & Qualifications:

• Cybersecurity, Information Technology, or a related field

• 4 to 8 years

• OWASP Top 10

• SIEM tools

• Strong analytical and problem-solving skills with excellent verbal and written communication abilities.

• business impact

Preferred Certifications:

• Technical: CEH, OSCP, GPEN

• GRC: CISA, CISM, CRISC, ISO 27001

Lead Implementer/Auditor Experience with GRC platforms like RSA Archer, ServiceNow GRC, or LogicGate is a plus.