T&T Consultant

Overview

Manila, Metropolitan Manila Satellite Office Solutions Pty Ltd

Posted today

The Security Consultant will work with the wider Consulting team, responsible for the development and delivery of Governance, Risk and Compliance services. This involves the end-to-end delivery for our customers and to a certain extent, business development. A key part of the role will involve directly engaging customers to provide security consulting, aligned to deliverables. These include information security assessments, information security awareness, risk assessments and more. The role will also involve working with the Sales teams and Pre-Sales teams across the team.

Responsibilities

• Delivery of Consulting Services including Information Security Assessments, Information Security Awareness consulting, and pre-sales support to present and respond to technical requirements.
• Provide technical expertise on services/products for pre-sales for key/large enterprises as needed.
• Deliver consulting services to clients per signed scopes of work and provide ad-hoc advisory within information security, governance, risk and compliance.
• Evangelise security best practices, research and knowledge sharing among customers and prospective customers.
• Service Delivery Management: adhere to SLAs, metrics, reporting, project scoping and management, customer escalation and engagement management.
• Manage internal security governance, risk and compliance with an internal pragmatic approach.
• Develop information security governance and risk management strategies, frameworks (ISO27001 & PCI-DSS), policies, standards and metrics to measure maturity of security operations.
• Perform reviews, assessments and system implementations based on industry/regulatory requirements (ISO27001, NIST CSF, SOC2/SSAE-18, Australian ISM, etc.).
• Scope required activities and perform project estimates to ensure delivery to high standards.
• Engage in skills transfer internally and with customers; deliver assignments on time within budget and share results and recommendations to technical and non-technical audiences.
• Develop and maintain strong relationships with customers through timely delivery of projects; conduct project management where required.
• Maintain internal security standards and confidentiality of customer material as defined in ISO 27001:2013 aligned ISMS.

Qualifications

• Minimum of 2-3 years' experience in IT, preferably in information and cybersecurity.
• Minimum 1-2 years' experience in a GRC focussed role.
• Experience in conducting IT security and cyber/information security assessments.
• Experience assisting with audits (internal & external) and auditors.
• Proven track record building strong relationships with key business leaders and stakeholders.
• Practical understanding of Information Security Standards & Frameworks (e.g., NIST CSF, ISO 27001, GDPR, ASD, ISM).
• Ideally 1 or more professional Information Security certifications (ISO 27001, CISSP Associate, CompTIA Security+ or equivalent).

Personal Attributes & Interpersonal Skills

• Strong stakeholder management capabilities.
• Outstanding verbal and written communication.
• Adaptability to change and ability to align Cyber/Information Security objectives with business goals.
• Prepared to act as a hands-on leader as required.

Leadership Competencies

• Decision making competency.
• Strong business acumen.
• Performance management; understanding of business engagement drivers.

Personality Core Values

• Customer Driven
• Accountable
• Team Player
• Humble
• Trustworthy

Health and Safety Responsibilities

• All employees are responsible for health, safety and welfare in the workplace.
• Comply with applicable legislation and safe working practices.
• Report hazards or injuries to your manager.
• Environmental awareness is followed in daily performance of duties.

#J-18808-Ljbffr

---