Cybersecurity Consultant

Grant Thornton (US); Makati; In loco; PHP 1.200.000 - 1.800.000; Tempo pieno

Descrizione del lavoro

Grant Thornton (US) is seeking a cybersecurity consultant to lead maturity assessments, advise senior stakeholders on cloud security and risk, and develop strategic roadmaps. The role requires strong GRC knowledge, regulatory familiarity, and the ability to translate complex risks into actionable insights.

The candidate will work with cross-functional teams, mentor junior staff, and support business development efforts while delivering high-impact security programs for diverse clients.

Competenze

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or related discipline.
• 3+ years (5+ for manager) in cybersecurity consulting, enterprise security, or risk leadership.
• Familiarity with NIST, ISO/IEC 27001, ISA 62443, CIS Controls, MITRE ATT&CK, PCI-DSS.

Mansioni

• Lead end-to-end cybersecurity maturity assessments using frameworks like NIST CSF, 800-53, ISO 27001, CIS controls.
• Evaluate risks with third-parties and critical services in cybersecurity context.
• Conduct interviews, workshops, and document reviews to evaluate practices.
• Develop data-driven insights and recommendations aligned to client risk appetites.
• Create strategic roadmaps to improve maturity, compliance, governance.
• Collaborate with client leadership to embed cyber risk in decisions.
• Support business development including proposals and presentations.
• Mentor consultants and contribute to internal methodologies.

Conoscenze

GRC

Cloud security

Zero trust

IAM

Data privacy

Threat management

Incident response

Regulatory compliance

CISSP

CISM

CRISC

ISO 27001 Lead

PCI-DSS

NIST

NIS2

DORA

CRA

GDPR

Presentations

Consulting experience

Formazione

Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or a related discipline.

Strumenti

NIST/ISO/ISA frameworks

CIS Controls

Descrizione del lavoro

Job Description:

Key Responsibilities

1For all levels:

• Lead end-to-end cybersecurity maturity assessments using frameworks and standards such as NIST CSF, NIST 800-53, ISO/IEC 27001, ISA 62443, or CIS controls measured against DORA, NIS2, CRA, PCI-DSS and new revisions to regulations and directives Act as a trusted advisor to senior stakeholders on topics such as cloud security, zero trust, threat management, incident preparedness, and regulatory compliance.
• Evaluate risks associated with third-parties and criticality of provisioned services in the context of cybersecurity.
• Conduct detailed interviews, workshops, and document reviews to evaluate cybersecurity practices
• Develop clear, data-driven insights and recommendations tailored to client risk appetites and business goals
• Create strategic roadmaps to improve cybersecurity maturity, compliance, and governance
• Collaborate with client leadership teams to embed cyber risk considerations into decision-making
• Support business development efforts, including proposal writing and client presentations
• Mentor consultants and contribute to internal methodology development

Skills & Experience

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or a related discipline.
• Minimum 3+ years (5+ for manager) years of experience in cybersecurity consulting, enterprise security, or risk management leadership.
• Strong understanding of key cybersecurity domains, including:
• oGovernance, Risk & Compliance (GRC)
• oCloud security and zero trust architectures
• oIdentity and Access Management (IAM)
• oData protection and privacy
• oThreat management and incident response
• Familiarity with frameworks and standards such as NIST, ISO/IEC 27001, ISA 62443, CIS Controls, MITRE ATT&CK, and PCI-DSS.
• Strong knowledge of regulatory frameworks including NIS2, DORA, CRA, and GDPR.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementor/Auditor.
• Experience performing assessments across multiple industries such as finance, healthcare, telecommunications or energy

Desired Skills

• Experience delivering large-scale transformation programs or regulatory-driven security initiatives.
• Exposure to security operations, SOC optimisation, or incident response.
• Ability to translate complex technical risks into clear, actionable insights for senior and executive audiences.
• Experience with GRC platforms such as Archer, OneTrust, or ServiceNow.
• Strong presentation and influencing skills, with the ability to build long-term client relationships.

Life at GT

Reward and benefits: Our reward and benefits are designed to create an environment where our people can flourish. We are committed to building a culture where our people have access to the necessary benefits to help promote a healthy lifestyle and thrive.

Equity, Diversity and Inclusion:

At Grant Thornton, we provide equitable opportunities for all our colleagues. We are a responsible, sustainable business where equity, diversity and inclusion (ED&I) is at the forefront of our workplace culture agenda, and today, we continue to build and develop on our existing ED&I structure and strategy to meet our workplace culture needs. People are at the heart of our business and teams built with varied backgrounds, racial differences, cultures, sexual orientations, religious orientations, ages, gender identities, abilities and family types present diverse viewpoints, which need to be heard and valued.

We are all at our best when we are able to be ourselves and we view integrity and authenticity as integral values to bring to our day-to-day work-life at the firm. We are excited to see the personality and perspectives you will bring to our team because we know we will all benefit from them. Diversity of thought, background and experience enables better decision-making, improves the quality of our delivery, and helps us to meet the needs of our clients. Our firm is built on people and their ideas, so we want to hear all the new perspectives and fresh thinking you have to offer. You form the bedrock of our firm’s best-practice principles and we will champion you as leaders from day one.

Recognition:

We want to create a culture of recognition and celebrating success, by saying thank you to people who surpass our expectations and recognising the right values and behaviours. Our Shout Out recognition scheme is our way of highlighting and promoting achievements. Whether you simply want to say thank you, celebrate a special occasion or give an award for doing something exceptional, you can do all of this and more through the scheme.

Requirements: