InfoSec Consultant: Policy, Risk & Testing

BayInfotech; Foster City (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

BayInfotech seeks an information security consultant with 7–8 years of experience to work as an individual contributor. The role emphasizes policy development, risk assessments, and security baseline creation, with hands-on capability in ethical hacking and threat mitigation.

The candidate should be adept at producing clear documentation and communicating complex security concepts to stakeholders. This position is based in Foster City, CA, and involves working onsite with potential for

Qualifications

• Experience in security policy development and implementation.
• Hands-on ethical hacking experience and threat countermeasures.
• Knowledge of NIST and ISO 27001-2/27005 standards.
• Ability to conduct risk assessments and produce documentation.
• Comfort with deep-dive analysis of technologies and risks.

Responsibilities

• Contribute as an independent information security consultant.
• Develop security policies, standards, and baseline configurations.
• Lead security awareness programs and risk assessments as needed.

Skills

Security Policy Development

Ethical Hacking

Security Standards

Security Awareness

NIST/ISO 27001-2/27005

Security Risk Assessments

Documentation

Tech Risk Deep Dives

Positive Attitude

Security Engineering

Project Management

Job description

BayInfotech seeks an information security consultant with 7–8 years of experience to work as an individual contributor. The role emphasizes policy development, risk assessments, and security baseline creation, with hands-on capability in ethical hacking and threat mitigation.

The candidate should be adept at producing clear documentation and communicating complex security concepts to stakeholders. This position is based in Foster City, CA, and involves working onsite with potential for