Cyber Security (Senior) Consultant & Manager, Technology Consulting, Amsterdam

Gryphon Search; Amsterdam; Hybrid; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Room for development

Challenging projects

Global network

Job summary

Gryphon Search is seeking a (Senior) Consultant to deliver cyber security assessments and drive improvement projects for diverse clients. You will join a collaborative team delivering security programs, governance, and hands-on technical work in a dynamic consulting environment.

Hybrid office-based role with a strong emphasis on delivering measurable risk reduction, process improvement, and client satisfaction.

Qualifications

• 3-6 years (Senior Consultant) or 0-3 years (Consultant) in security consulting.
• Experience with security frameworks such as NIST, ISF, CIS Controls, ISO, PCI-DSS.
• Hands-on IT security implementation experience is a plus.
• Fluent in English; Dutch skills are a plus.

Responsibilities

• Deliver cyber security assessment and improvement projects for clients.
• Lead security projects spanning multiple days to months for various clients.
• Contribute to vulnerability management, security monitoring, risk assessments, and governance improvements.
• Develop security strategy, policies and procedures, and incident response playbooks.

Skills

Security consulting

Analytical skills

Communication skills

English fluency

Project leadership

Education

University degree (STEM)

CISSP

CISM

Job description

Leading Consultancy (not a Big-Four), specialized in the field of Business Risk Consulting, Management Control & IT Technology.

Key figures:

9000+ employees operating in 20 counties, generating a revenue of approx. €2 billion.

Company values:

• Freedom
• Commitment to success

Mission:

Deliver meaningful results, nurture rewarding careers for its talent, and build deep relationships with each other and its diverse client base.

Team:

The Dutch office: approx. 100 staff, with 17 nationalities.

Service offering: in four areas;

• Internal Audit and Financial Advisory
• Business Performance Improvement

Prior had positions as Principal Manager at PwC Advisory in the Netherlands (7 years) and as IT Architect at Siennax Hosting Services (currently part of KPN, 2 years). Kees started his career as a network consultant at the consulting division of Seneca Advanced Communications (3 years).

Reason of the vacancy: expansion

A combination of winning market share & natural churn.

Levels looking to hire (in no particular order):

• 1 (Senior) Manager
• 2 Senior Consultants
• 1 Consultant

About Technology Consulting

Focus is on the following core solution offerings:

• Cyber Security and Privacy: combine deep technical security competence with a thorough understanding of business administration, enterprise risk management and control. This profile makes them a trusted business partner in the boardroom as well as for technical specialists. Their holistic approach starts by understanding what is most important to organizations, then structuring and supporting programs so your business is engineered to grow securely. Specific services include:
  • Security Program and Strategy
  • Managed Security Services
  • Incident Response and Cyber Resilience
  • Attack and Penetration
• Technology Strategy & Governance: help clients to mature both their technology and technology management capabilities. From establishing strategy, defining and implementing future state solutions, to supporting ongoing delivery of services, consistently provide highly-value IT process and infrastructure solutions.
• Enterprise Applications Solutions: support in the selection and implementation of (ERP) applications, broad advice on IT strategy or specific advice on, for example, authorization models or the design of application controls.

Culture:

Based on team spirit, professionalism and entrepreneurial spirit in an informal atmosphere.

Team members are an open book, where you legitimately feel you can ask questions, they actually want you to ask questions to understand your thought process and be able to guide you best.

Reporting line:

In this role you will report to the Managing Director Technology Consulting - Cybersecurity.

The role of a (Senior) Consultant

• Deliver Cyber Security assessment and improvement projects to their clients. You will be working within ambitious, skilled and knowledgeable teams, at and with clients, on a day-to-day basis.
• Improving, educating and helping their clients that are facing security challenges for which they require a structured, one-off, assessment or improvement effort. You’ll work on projects that can take anywhere from multiple days to multiple months, and for a variety of clients and industries. The role is challenging and requires flexibility and agility to adapt to each unique engagement that you’ll encounter.

Example projects include:

• Security improvements projects for capabilities such as:
• Vulnerability management
• Security monitoring (SIEM)
• Governance improvements such as:
• Strategy, policies and procedures writing
• Security awareness
• Defining security organization target operating models
• Setting up playbooks and standard operating procedures
• Penetration testing, phishing simulations and red teaming
• Risk assessments and internal audit assignments on Cyber Security and IT topics

You’ll be challenged with demanding and ambitious client projects, and will have ample opportunity to grow your knowledge, skills and experience. There will be great and clear opportunities for career advancement within the office and possibilities to make your next career step in their international network of offices around the world.

Your profile:

• 3-6 years (Senior Consultant) or 0-3 years (Consultant) of relevant experience, such as:
• Security consulting services;
• Operational roles such as Security Officer, Security Analyst, Security Engineer, etc.;
• Leading Security implementation projects;
• Ethical hacking/ pentesting /phishing exercises, etc.
• Experienced in working in a project setting with defined scope, deliverables, time and budgets;
• Experience with Cyber Security frameworks such as NIST, ISF, CIS Controls, ISO, PCI-DSS;
• Hands-on experience with the implementation of IT solutions is a plus;
• Risk, compliance and audit experience are a plus;
• A well-developed understanding of business processes (finance, logistics, supply chain, purchasing, manufacturing, etc.) is a plus;
• Fluent in English, preferably also in Dutch (or eager to learn);
• Strong analytical and communication skills (verbal and written).

Education:

• University degree; preferably within Science, Technology, Engineering or Mathematics (STEM profile);
• Professional accreditations such as CISSP and CISM are a plus

Offer:

• Above market-rate salary and very good secondary benefits. Challenging projects and the opportunity to help shape the IA team à have real impact
• Room for personal development à several licenses/certifications per year are offered. Important is to keep developing yourself, individually and in the interest of the company

Quote MD:

“If in the end you decide to leave the firm, then better to leave in great shape with a good CV”

How do they distinguish themselves from i.e. the Big-Four;

1. Real and content-driven knowledge

2. Listening to the customer and looking for the solution together instead of slightly adjusting its 'own' model and pushing it into the organization (which sometimes seems to be the case with other Consultancies)

3. Jointly (with the customer) put together a solution, so that the solution is a more permanent one

4. Soft skills - involved, friendly and more human

6. Your wings aren't being cut..

7. Autonomy

8. Entrepreneurial: able to build/set up your own effort

9. Output driven: life before work!

Home Office Options:

Hybrid is possible, they are not that strict on actually being at the office, it is more about efficiency and results à output-driven.

Note

It is advisable/preferred to be more regular at the office in the beginning when you start, this to ensure a smooth landing.

In case you are intrigued, or you wish to have a discreet call, please contact Boudewijn Vellinga via [e-mail] or under [phone] (landline) or [phone] (mobile).

We’d rather have a dialogue to explain more, than for you to conclude it might not be a fit.