Cybersecurity Strategy & Risk Consultant

Grant Thornton Ireland; Makati; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Grant Thornton Ireland is seeking a cybersecurity consultant to lead end-to-end maturity assessments and advise senior clients on cloud security, zero trust, and regulatory compliance. You will evaluate third-party risks, conduct interviews and workshops, and craft data-driven insights and strategic roadmaps to enhance governance.

The role requires 3+ years in cybersecurity consulting or risk leadership, with a strong background in GRC, IAM, data protection, and incident response.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or related discipline.
• Minimum 3+ years (5+ for manager) years of experience in cybersecurity consulting, enterprise security, or risk management leadership.
• Strong knowledge of GRC, cloud security, zero trust architectures, IAM, data protection, incident response, and regulatory frameworks.

Responsibilities

• Lead end-to-end cybersecurity maturity assessments using frameworks such as NIST CSF, ISO/IEC 27001, and CIS Controls.
• Evaluate risks from third-parties and critical services in cybersecurity context.
• Conduct interviews, workshops, and reviews to assess practices and controls.
• Develop data-driven insights and recommendations aligned with client risk appetite and goals.
• Create roadmaps to improve maturity, compliance, and governance; embed cyber risk in decisions.
• Support business development with proposals and client presentations; mentor consultants.

Skills

GRC

Cloud security

Zero trust

IAM

Data protection

Threat management

Incident response

NIST

ISO 27001

ISA 62443

CIS Controls

MITRE ATT&CK

PCI-DSS

GDPR

Regulatory compliance

Education

Bachelor’s or Master’s degree in Cybersecurity/IS

Tools

Archer

OneTrust

ServiceNow

Job description

Grant Thornton Ireland is seeking a cybersecurity consultant to lead end-to-end maturity assessments and advise senior clients on cloud security, zero trust, and regulatory compliance. You will evaluate third-party risks, conduct interviews and workshops, and craft data-driven insights and strategic roadmaps to enhance governance.

The role requires 3+ years in cybersecurity consulting or risk leadership, with a strong background in GRC, IAM, data protection, and incident response.