Associate Lead Consultant - Cyber Security Job

The Cyber Security Consultant will be responsible for leading the development and implementation of a comprehensive Risk Management program. The Security Consultant will be responsible for creating and maintaining our overall security architecture including cloud and network. Also responsible for applications security, Secure configuration & hardening, and organization security score platform.

BitSight

• Daily monitoring and review of exposed credentials
• Weekly BitSight security findings, perform an analysis, and present the findings to the security Architecture and Engineering team, GRC team, and application stakeholders.
• Advise stakeholders on the identified potential security gaps and assist in remediating identified open gaps.
• Triaging, and addressing application security vulnerabilities as needed.
• Clean up the inactive domains on approval from domain owners
• Present findings to security leadership every week.
• Manage and follow the SOP documents as needed.

• Create and maintain guidelines to support the development of secure software within CUSTOMER.
• Responsible for embedding security into CUSTOMER s end-to-end software development practices/ DevSecOps.
• Excellent understanding of information security and risk frameworks/ standards ISO 27001/2, NIST 800 series, and CIS.
• Understanding of Secure configuration and Hardening
• Manage third-party audit activities related to infosec regulatory compliance
• Experience with internal controls, risk assessments, business processes and internal IT control testing or operational auditing
• Drive vulnerability Management program towards identification of threats on CUSTOMER assets through automated, and regularly scheduled scans of both external, and internal facing assets.
• Design and implement a comprehensive security strategy to deliver continuous improvements on our security infrastructure and systems security posture
• Perform risk assessment on new and existing third parties
• Knowledge of ITIL, NIST and other security frameworks and standards
• Has Knowledge robust Security knowledge across all security domains
• Outstanding organizational skills
• Has excellent stakeholder communication and collaboration skills
• Build and maintain strong relationships with cross-functional technical teams will also enable you to influence the way they view, navigate and remediate any potential security threats in their day-to-day activities.

• Certified in Risk and Information Systems Control (CRISC),
• GIAC Security Essentials Certified (GSEC)
• Certified Information Systems Security Professional (CISSP)