Information Security Consultant

Jobtailor; West Des Moines (IA); On-site; USD 85,000 - 120,000; Full time

Job summary

Jobtailor seeks a cybersecurity professional in Iowa to audit IT systems, assess risks, and implement governance controls for clients. The role emphasizes reviewing controls, developing policy baselines, and supporting incident response while communicating findings to management.

Required are 2+ years in cybersecurity, familiarity with PCI/HIPAA/SOX/FISMA, and CISSP or equivalent certifications. Strong communication and documentation skills are essential for client-facing work.

Qualifications

• 2+ years of related experience in cybersecurity or information security roles.
• 2+ years implementing Cybersecurity Programs.
• 2+ years implementing Compliance and Governance Programs.
• CISSP or other current industry standard certifications in areas of security expertise.
• Experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities.
• Ability to identify and evaluate risk to IT systems and communicate risks to management.
• Experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA) and security frameworks (NIST, ISO, CIS).
• Ability to develop policies, standards and baseline configurations.
• Strong attention to detail and ability to document findings and convey information.

Responsibilities

• Audit, test, or review IT systems, network or application architecture and business processes for compliance with best practices and/or regulatory requirements.
• Review and recommend technical, administrative, and physical controls to mitigate identified risk.
• Perform risk assessments of IT infrastructure and applications and recommend improvements based on risk tolerance levels.
• Develop materials and processes to assist clients with implementing both technical and non-technical controls.
• Assist with incident response during security events.

Skills

Cybersecurity

Risk assessment

Security controls

Regulatory compliance

Communication

Project management

Incident response

Security frameworks

Documentation

Job description

Responsibilities

• Audit, test, or review IT systems, network or application architecture and business processes for compliance with best practices and/or regulatory requirements
• Review and recommend technical, administrative, and physical controls to mitigate identified risk
• Perform risk assessments of IT infrastructure and applications and make recommendations for improvements based on the client’s stated risk tolerance levels
• Develop materials and processes to assist clients with implementing both technical and non-technical controls
• Assist with incident response during security events

Requirements

• 2+ years of related experience
• 2+ years implementing Cybersecurity Programs
• 2+ years implementing Compliance and Governance Programs
• CISSP or other current industry standard certifications in areas of security expertise
• Experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities
• Ability to identify and evaluate risk to IT systems and associated business processes and communicate risks to management
• Demonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security frameworks and controls (e.g., NIST, ISO, CIS)
• Demonstrated experience reviewing and recommending appropriate technical, administrative, and physical controls
• Demonstrated experience selecting and implementing appropriate risk mitigation strategies to ensure IT systems remain within established risk tolerance levels
• Ability to develop policies, standards and baseline configurations
• Strong attention to detail and ability to document findings and convey information
• Ability to manage project deliverables and deadlines
• Ability to provide superior customer service via phone and email
• Strong listening and presentation skills
• Ability to clearly communicate with co-workers, management, clients, and vendors