Security/ Threat & Risk Consultant (Qatar location)

Capco; Warszawa; On-site; PLN 90,000 - 130,000; Full time

Benefits offered by this job

B2B Contract

Job summary

Capco Poland in Warsaw is seeking a Security Consultant to help clients identify, assess, and manage cybersecurity threats and technology risks across complex financial services environments. You will work with security, technology, risk, architecture, and business teams to deliver threat and risk assessments that support informed decisions.

The engagement is expected to run for one year and requires relocation to the Middle East (Qatar) for the duration, with collaboration across data

Qualifications

• Experience in cybersecurity risk assessment and threat modelling.
• Knowledge of security controls, risk assessment methodologies, and remediation planning.
• Ability to translate technical threats into business risks and communicate with stakeholders.

Responsibilities

• Assess security controls and their effectiveness against cyber risks.
• Identify threats, vulnerabilities, control gaps, and risk scenarios; propose remediation.
• Conduct regular threat and risk assessments and recommend improvements to security posture.
• Collaborate with security, architecture, engineering, risk, and business teams to embed risk activities.
• Perform threat and risk assessments across infrastructure, cloud, and platforms.

Skills

Cybersecurity risk assessment

Threat modelling

Regulatory & governance

Stakeholder communication

Cloud & infrastructure security

Job description

Poland - Warsaw

CAPCO POLAND

*We are looking for candidates willing to relocate to the Middle East - Qatar for the duration of the project.

AtCapco Poland, we aren't just another consultancy - we are the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management.

Our secret?

A culture that is fast, flexible, and fiercely entrepreneurial. We move quickly, think creatively, and always put our people first.

We're passionate about growth - both for our clients and ourselves - and that means attracting the very best talent to join us on this exciting journey.

We're proud to be:

• Trailblazers in banking, payments, capital markets, wealth, and asset management
• Champions of an agile, nimble, and innovative work environment
• Dedicated to building a team of top-notch professionals who share our drive and vision

The Role

Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You'll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls.

This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture.

The engagement is expected to run for one year and requires relocation to the Middle East for its duration. You will collaborate with client and project teams to deliver the agreed data engineering scope and project outcomes.

What You'll Do

• Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks.
• Identify potential threats, vulnerabilities, control gaps, and risk scenarios, documenting findings and recommending proportionate remediation actions.
• Conduct regular data, threat and risk assessments and recommend corrective actions to improve security posture.
• Work with security, architecture, engineering, risk, and business stakeholders to embed threat and risk assessment activities throughout technology change and delivery.
• Conduct threat and risk assessments across infrastructure, cloud environments, technology platforms, and business services.
• Produce clear risk assessments, reports, and recommendations that support governance, remediation planning, risk acceptance, and informed decision-making.

What We're Looking For

• Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines.
• Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning.
• Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements.
• Strong understanding of cybersecurity frameworks, governance, risk management, regulatory requirements, and security-by-design principles.
• Clear communication and stakeholder management skills, with the ability to translate technical threats and vulnerabilities into understandable business risks.

Bonus Points For

• Experience delivering threat and risk assessments within banking, financial services, or another regulated environment.
• Knowledge of recognised cybersecurity and risk frameworks and industry security standards.
• Experience with threat modelling methodologies, security testing, vulnerability management, or cyber threat intelligence.
• Relevant cybersecurity, technology risk, cloud, or information security certifications.
• Exposure to large-scale cybersecurity, cloud, regulatory, or technology transformation programmes.

We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on diverse projects.