Senior Consultant I - Security & Privacy

Cloudstaff; Angeles; On-site; PHP 781,200 - 1,116,000; Full time

Benefits offered by this job

Comprehensive health and life insurance

Flexible leave credits

Quarterly perks boxes

Annual Performance Review with Salary Increase

In-house psychiatrist support

Employee Share Units program

Job summary

Cloudstaff in Angeles, Philippines is on the lookout for a Senior Consultant I - Security & Privacy. This individual will take on responsibilities that involve extensive client contact, leading project lifecycles in IT general controls audit, cyber security, and information security services. Ideal candidates should possess at least 5 years of experience in relevant fields and a tertiary degree. The position offers a hybrid work environment with numerous perks and opportunities for career advancement.

Qualifications

• Minimum 5 years professional services experience in Cyber/IT technical delivery.
• Successful Criminal Record Screening Clearance required.
• Experience with cybersecurity and information security standards.

Responsibilities

• Perform IT, Cyber, Business Continuity, technology risk assessments.
• Execute IT, cyber security, and resiliency audits.
• Conduct independent risk-based assessments and audits.

Skills

Communication skills

Analytical skills

Interpersonal skills

Attention to detail

Education

Relevant tertiary degree

Tools

IDEA

SQL

Job description

Job Description

We’re Hiring: Senior Consultant I - Security & Privacy!

We are currently looking for a Senior Consultant I - Security & Privacy to join our team.

Role: Senior Consultant I - Security & Privacy

Work Arrangement: Hybrid

Schedule: Morning Shift

Security & Privacy (S&P) consultants are expected to have responsibility for extensive client contact, staff training, management & development, and liaising with third parties. You will be skilled and experienced at managing the whole project lifecycle for IT general controls audit, cyber security and information security services.

Key Responsibilities

• Perform IT / Cyber / Business Continuity / technology risk assessments, technical security related reviews, assess the effectiveness of processes/controls and risks related to third party organisations.
• Executing and completing individual IT, cyber security and resiliency audits and special project reviews relating to various applications, IT infrastructure and other relevant IT domains.
• Conducting independent risk-based IT, cyber security and resiliency assessments to assess the adequacy and effectiveness of internal controls, the reliability and integrity of the client’s business and IT systems.
• Leasing consulting and audit engagements simultaneously with numerous engagement team members per audit, including assisting with planning, execution and scheduling staff.
• Undertaking or arranging to undertake special consulting or other reviews as required. These may include system software reviews, new system development technical evaluations, post implementation reviews, contingency planning reviews, logical / physical access reviews and installation reviews.
• Assist in the planning of client deliverables (i.e. strategic internal audit plan, scope documents).
• Responsible for the execution of fieldwork and documentation of findings (i.e. maintain the audit file).
• Providing IT general controls and application controls audit support to external audit.
• Determining the objectives, scope and extent of each audit and ensure that the audit is professionally and efficiently completed within deadlines.
• Assist in business development activities of the firm.
• Coordination with other divisions.
• Address technical issues and assist in preparing technical position papers.
• Undertaking development of team members.
• Assisting with management and co-ordination of the audit team including training, mentoring and methodology compliance.
• Identifying opportunities for improvement to operational efficiencies and effectiveness.
• Maintaining appropriate and adequate documentation for each audit to a standard as required by auditing standards.
• Identification of findings and issues, and assisting in the drafting of client reports and discuss with relevant management as required.
• Liaising, and presenting audit results to information system staff and client management.
• Remaining abreast with technological enhancements in auditing and IT.

Qualification and requirements

Education Requirements

• Successful Criminal Record Screening Clearance.
• Relevant tertiary degree and/or qualification is essential.

Demonstrated Experience & Attributes

• Minimum 5 years professional services experience in Cyber / IT technical delivery, Business Continuity, IT audit, internal controls, or risk management.
• Experience performing security risk assessments, testing or auditing of cybersecurity or information security standards or governance frameworks (e.g. one or more of COBIT, NIST Cyber Security Framework, ASD Top 35 and Essential Eight, PCI DSS, CIS Critical Security Controls Top 20, PSPF, Australian Government Information Security Manual, VPDSS, ISO/IEC 27001, Cloud Security Alliance Guidance, Australian Privacy Principles, GDPR).
• Experience with leading engagements on Business Continuity (BCP), IT Disaster Recovery (IT DRP), assessment of recovery plans for critical applications and systems, Incident management as well as review against frameworks such as ISO 22301, BS 25999.
• Experience in performing engagements where teams are completing various technical testing assessments and be able to translate technical findings and articulate recommendations for non-technical client staff.
• Demonstrated knowledge of control best practices in IT general controls and applications.
• Demonstrated Knowledge of IT processes, project management, applications, databases, operating systems and network infrastructure to apply better practice guidance and identify opportunities for improvement.
• Outstanding interpersonal and communications skills, able to communicate effectively in verbal and written format with technical and non-technical audiences.
• Strong analytical and written communication skills including documenting customer reports and presentations.
• Ability to develop effective solutions and enhancements in an innovative manner.
• Strong attention to detail and prioritising skills, able to produce high quality work autonomously and as part of a team.
• Ability to add value by providing a high standard of service in response to client demands.

Desirable

• Demonstrated knowledge in data analytics / computer assisted audit techniques using IDEA, ACL, SQL or other relevant data analytical tools.

Perks & Benefits (Work From Home/Hybrid)

• Comprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment.
• Flexible leave credits which may be used for vacation, emergency and sick leaves.
• Quarterly perks boxes for WFH staff, offering groceries and snacks to keep you fueled. Superb and exciting Mid-Year Parties – with items to give away and cash prizes!
• Endless opportunities for career advancement.
• Annual Performance Review with Salary Increase.
• We set you up for success with a company-provided PC/Laptop and fiber internet connection.
• Tech-on-wheels Support.
• Participate and join our CS Social Clubs and Special Interest Groups to connect with colleagues.
• International career growth and connections.
• Unlimited cash incentives for hired referrals.
• Mental Wellness Employee Assistance program through Lifeworks.
• In-house psychiatrist available to support employees' well-being.
• Become part of the Employee Share Units program.
• Cloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc.