Cybersecurity Consultant

Grant Thornton Ireland; Makati; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Grant Thornton Ireland is seeking a cybersecurity consultant to lead end-to-end maturity assessments and advise senior clients on cloud security, zero trust, and regulatory compliance. You will evaluate third-party risks, conduct interviews and workshops, and craft data-driven insights and strategic roadmaps to enhance governance.

The role requires 3+ years in cybersecurity consulting or risk leadership, with a strong background in GRC, IAM, data protection, and incident response.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or related discipline.
• Minimum 3+ years (5+ for manager) years of experience in cybersecurity consulting, enterprise security, or risk management leadership.
• Strong knowledge of GRC, cloud security, zero trust architectures, IAM, data protection, incident response, and regulatory frameworks.

Responsibilities

• Lead end-to-end cybersecurity maturity assessments using frameworks such as NIST CSF, ISO/IEC 27001, and CIS Controls.
• Evaluate risks from third-parties and critical services in cybersecurity context.
• Conduct interviews, workshops, and reviews to assess practices and controls.
• Develop data-driven insights and recommendations aligned with client risk appetite and goals.
• Create roadmaps to improve maturity, compliance, and governance; embed cyber risk in decisions.
• Support business development with proposals and client presentations; mentor consultants.

Skills

GRC

Cloud security

Zero trust

IAM

Data protection

Threat management

Incident response

NIST

ISO 27001

ISA 62443

CIS Controls

MITRE ATT&CK

PCI-DSS

GDPR

Regulatory compliance

Education

Bachelor’s or Master’s degree in Cybersecurity/IS

Tools

Archer

OneTrust

ServiceNow

Job description

Job Description:

Key Responsibilities

JOB DESCRIPTION

1 For all levels:

• Lead end-to-end cybersecurity maturity assessments using frameworks and standards such as NIST CSF, NIST 800-53, ISO/IEC 27001, ISA 62443, or CIS controls measured against DORA, NIS2, CRA, PCI-DSS and new revisions to regulations and directives Act as a trusted advisor to senior stakeholders on topics such as cloud security, zero trust, threat management, incident preparedness, and regulatory compliance.
• Evaluate risks associated with third-parties and criticality of provisioned services in the context of cybersecurity.
• Conduct detailed interviews, workshops, and document reviews to evaluate cybersecurity practices
• Develop clear, data-driven insights and recommendations tailored to client risk appetites and business goals
• Create strategic roadmaps to improve cybersecurity maturity, compliance, and governance
• Collaborate with client leadership teams to embed cyber risk considerations into decision-making
• Support business development efforts, including proposal writing and client presentations
• Mentor consultants and contribute to internal methodology development

Skills & Experience

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or a related discipline.
• Minimum 3+ years (5+ for manager) years of experience in cybersecurity consulting, enterprise security, or risk management leadership.
• Strong understanding of key cybersecurity domains, including:
• Governance, Risk & Compliance (GRC)
• Cloud security and zero trust architectures
• Identity and Access Management (IAM)
• Data protection and privacy
• Threat management and incident response
• Familiarity with frameworks and standards such as NIST, ISO/IEC 27001, ISA 62443, CIS Controls, MITRE ATT&CK, and PCI-DSS.
• Strong knowledge of regulatory frameworks including NIS2, DORA, CRA, and GDPR.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementor/Auditor.
• Experience performing assessments across multiple industries such as finance, healthcare, telecommunications or energy

Desired Skills

• Experience delivering large-scale transformation programs or regulatory-driven security initiatives.
• Exposure to security operations, SOC optimisation, or incident response.
• Ability to translate complex technical risks into clear, actionable insights for senior and executive audiences.
• Experience with GRC platforms such as Archer, OneTrust, or ServiceNow.
• Strong presentation and influencing skills, with the ability to build long-term client relationships.

Reward and benefits:

Our reward and benefits are designed to create an environment where our people can flourish. We are committed to building a culture where our people have access to the necessary benefits to help promote a healthy lifestyle and thrive.

Equity, Diversity and Inclusion:

At Grant Thornton, we provide equitable opportunities for all our colleagues. We are a responsible, sustainable business where equity, diversity and inclusion (ED&I) is at the forefront of our workplace culture agenda, and today, we continue to build and develop on our existing ED&I structure and strategy to meet our workplace culture needs. People are at the heart of our business and teams built with varied backgrounds, racial differences, cultures, sexual orientations, religious orientations, ages, gender identities, abilities and family types present diverse viewpoints, which need to be heard and valued.

We are all at our best when we are able to be ourselves and we view integrity and authenticity as integral values to bring to our day-to-day work-life at the firm. We are excited to see the personality and perspectives you will bring to our team because we know we will all benefit from them. Diversity of thought, background and experience enables better decision-making, improves the quality of our delivery, and helps us to meet the needs of our clients. Our firm is built on people and their ideas, so we want to hear all the new perspectives and fresh thinking you have to offer. You form the bedrock of our firm’s best-practice principles and we will champion you as leaders from day one.

Recognition:

We want to create a culture of recognition and celebrating success, by saying thank you to people who surpass our expectations and recognising the right values and behaviours. Our Shout Out recognition scheme is our way of highlighting and promoting achievements.

Whether you simply want to say thank you, celebrate a special occasion or give an award for doing something exceptional, you can do all of this and more through the scheme.