Cyber Risk Consultant – Threat Modeling & Security Controls

capco; Polska; Hybrid; PLN 356,000 - 514,000; Full time

Job summary

Capco is seeking a Security Risk Consultant to help clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. The role sits in a hybrid model with Poland and Doha (1-year relocation) and involves collaboration with security, risk, architecture and business teams.

You'll deliver threat and risk assessments, document findings, and propose remediation actions to strengthen security posture for financial services clients.

Qualifications

• Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines.
• Practical knowledge of threat modeling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning.
• Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements.
• Strong understanding of cybersecurity frameworks, governance, risk management, regulatory requirements, and security-by-design principles.
• Clear communication and stakeholder management skills, with the ability to translate technical threats and vulnerabilities into understandable business risks.

Responsibilities

• Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks.
• Identify potential threats, vulnerabilities, control gaps, and risk scenarios, documenting findings and recommending proportionate remediation actions.
• Conduct regular data, threat and risk assessments and recommend corrective actions to improve security posture.
• Work with security, architecture, engineering, risk, and business stakeholders to embed threat and risk assessment activities throughout technology change and delivery.
• Conduct threat and risk assessments across infrastructure, cloud environments, technology platforms, and business services.
• Produce clear risk assessments, reports, and recommendations that support governance, remediation planning, risk acceptance, and informed decision-making.

Skills

Cybersecurity risk assessment

Threat assessment

Technology risk

Information security

Risk management

Job description

Capco is seeking a Security Risk Consultant to help clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. The role sits in a hybrid model with Poland and Doha (1-year relocation) and involves collaboration with security, risk, architecture and business teams.

You'll deliver threat and risk assessments, document findings, and propose remediation actions to strengthen security posture for financial services clients.