Security Consultant

Good co India; United States; Remoto; USD 110.000 - 150.000; Tempo pieno

Descrizione del lavoro

Good co India seeks a cybersecurity consultant to perform assessments, audits, risk analyses and control recommendations across cloud, network, and application environments.

You'll develop security policies, conduct threat modelling, and coordinate remediation efforts while engaging with client stakeholders and IT teams to deliver impactful engagements.

Competenze

• Bachelors in CS/IT/Cybersecurity or related field.
• 5–10 years in cybersecurity, information security, IT risk, audits or consulting.
• Solid understanding of security principles, architecture, risk and controls.
• Hands-on in cloud, app, network security, IAM, or GRC domains.
• Familiar with ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR where applicable.
• Certs such as CISSP, CISM, CEH, CISA or ISO 27001 Lead Auditor preferred.
• Strong analytical, reporting and presentation skills.

Mansioni

• Conduct cybersecurity assessments, audits, vulnerability assessments and risk analyses.
• Evaluate IT infrastructure, applications, networks and cloud against best practices and regs.
• Develop security policies, standards, procedures and control frameworks.
• Perform security architecture reviews, threat modelling and risk assessments.
• Assess controls across network, cloud, IAM, endpoint and app security.
• Coordinate vulnerability management, pen-testing, remediation and improvement initiatives.
• Assist clients with implementing governance, risk management and compliance controls.
• Investigate incidents, analyze findings and provide recommendations.
• Prepare assessment reports, risk registers and executive presentations.
• Collaborate with client stakeholders, IT teams and security engineers.
• Monitor emerging threats and regulatory changes for updated recommendations.
• Support pre-sales, technical proposals and client workshops.

Conoscenze

Cybersecurity

Security architecture

Risk assessment

Vulnerability management

Penetration testing

GRC

Cloud security

Regulatory compliance

Formazione

Bachelor's degree in CS/IT/Cybersecurity

Strumenti

Nessus

Qualys

Burp Suite

Splunk

Microsoft Sentinel

Descrizione del lavoro

Role & responsibilities

• Conduct cybersecurity assessments, security audits, vulnerability assessments and risk analyses to identify security gaps and recommend mitigation strategies.
• Evaluate existing IT infrastructure, applications, networks and cloud environments against security best practices and regulatory requirements.
• Develop and recommend security policies, standards, procedures and control frameworks aligned with ISO 27001, NIST, SOC 2 and PCI DSS.
• Perform security architecture reviews, threat modelling and risk assessments for enterprise systems and business applications.
• Assess security controls across network security, cloud security, identity and access management (IAM), endpoint security and application security.
• Support vulnerability management, penetration-testing coordination, remediation tracking and security improvement initiatives.
• Assist clients in implementing security solutions, governance frameworks, risk management processes and compliance controls.
• Investigate security incidents, analyze findings and provide recommendations to improve incident response and threat detection capabilities.
• Prepare security assessment reports, audit documentation, risk registers, remediation plans and executive-level presentations.
• Work closely with client stakeholders, IT teams, security engineers and management to deliver cybersecurity consulting engagements.
• Monitor emerging cyber threats, vulnerabilities, technologies and regulatory changes to provide up-to-date security recommendations.
• Support pre-sales activities, technical proposals, client workshops and security awareness initiatives, where required.

Preferred candidate profile

• Bachelors degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 5 to 10 years of experience in cybersecurity, information security, IT risk management, security auditing or consulting.
• Strong understanding of cybersecurity principles, security architecture, vulnerability management, risk assessment and security controls.
• Hands-on experience in one or more domains, such as cloud security, application security, network security, IAM, penetration testing or Governance, Risk and Compliance (GRC).
• Working knowledge of security frameworks and regulatory standards, including ISO 27001, NIST CSF, SOC 2, PCI DSS and GDPR, as applicable.
• Familiarity with security tools such as Nessus, Qualys, Burp Suite, Splunk, Microsoft Sentinel or equivalent platforms, depending on specialization.
• Understanding of cloud platforms, operating systems, networking, encryption, firewalls, endpoint protection and incident response.
• Relevant certifications such as CISSP, CISM, CEH, Security+, CISA, CCSP or ISO 27001 Lead Auditor are preferred, depending on the role.
• Strong analytical, problem-solving, report-writing and presentation skills, with the ability to translate technical security risks into business-oriented recommendations.
• Excellent client communication, stakeholder management, teamwork and project management skills.
• Ability to manage multiple consulting engagements, work independently and deliver security assessments and recommendations within agreed timelines.