Consultant IT Security & Risk Management

LeadingEdge HR Solutions; Remote; SAR 200,000 - 300,000; Part time

Job summary

A prominent HR consultancy is seeking an experienced consultant in IT Security and Risk Management for a short-term contract. This part-time role is focused on supporting security governance and risk-monitoring initiatives, ideal for professionals with Big 4 experience. Responsibilities include conducting risk assessments, performing controls testing, leading compliance assessments, and creating analytics for senior stakeholders. The position is remote and offers flexibility for a 2-3 month engagement.

Qualifications

• Proven experience in IT security and risk management.
• Hands-on experience with RCSA and controls testing.
• Strong analytical and reporting skills.

Responsibilities

• Support Security & Technology Risk Management activities.
• Perform IT & Security Risk and Control Self-Assessments.
• Conduct controls testing and maintain the IT Controls Library.
• Lead controls compliance assessments.
• Define and monitor Key Risk Indicators (KRIs).
• Create dashboards and analytics for stakeholders.
• Support system integration with data sources.

Skills

IT security expertise

Risk management skills

Strong analytical skills

Stakeholder management

Job description

Overview

Our client is seeking an experienced consultant in IT Security and Risk Management for a short-term remote engagement. The role is suited to professionals who can quickly support security governance, controls, and risk-monitoring initiatives.

Location & Contract

Location: Saddar, Karachi (Remote)

Contract Type: 2-3 months (Part-time / Contract considered)

Experience

Experience: Must have Big 4 experience

Key Responsibilities

• Support Security & Technology Risk Management and governance activities
• Perform IT & Security Risk and Control Self-Assessments (RCSA)
• Conduct controls testing and maintain the IT & Security Controls Library
• Lead controls compliance assessments and help address internal/external risk incidents
• Define and monitor Key Risk Indicators (KRIs) and related reporting
• Create dashboards, monitoring, and analytics for senior stakeholders
• Support system integration with relevant data sources

Requirements

• Proven experience in IT security, risk management, and security governance
• Hands-on experience with RCSA, controls testing, and KRI frameworks
• Strong analytical, reporting, and stakeholder-management skills
• Available for a 2-3-month engagement (part-time or contract candidates welcome)