Information Security Consultant - Risk Assessment & Management

Placements24; Mbombela (Nelspruit); Sur place; ZAR 550 000 - 950 000; Plein temps

Avantages offerts par ce poste

Competitive salary package

Medical aid

Retirement benefits

Professional growth opportunities

Certification support

Résumé du poste

Placements24 in Nelspruit, Mpumalanga is seeking an experienced Information Security Consultant focused on risk assessment and management. The role involves client-facing risk analyses, developing treatment plans, and implementing controls to protect assets across client engagements.

The ideal candidate will have a strong background in risk frameworks (ISO 31000, NIST RMF) and certifications, with excellent communication and travel willingness for on-site work.

Qualifications

• Bachelor's degree in computer science, information security, or related field.
• Minimum of 4 years in information security with focus on risk assessment or IT audit.
• Knowledge of risk assessment methods (e.g., FAIR, OCTAVE) and frameworks (ISO 31000, NIST RMF, ISO 27005).
• Experience with ISO 27001, NIST CSF or PCI DSS assessments.
• Willingness to travel to client sites.

Responsabilités

• Conduct information security risk assessments for clients across various industries.
• Identify, analyze, and document threats, vulnerabilities and potential impacts.
• Develop risk treatment strategies and mitigation plans tailored to client needs.
• Advise clients on security controls based on assessment findings and best practices.
• Assist clients in maturing their risk management programs.
• Present findings and recommendations to client stakeholders in clear reports.

Connaissances

Information security

Risk assessment

Risk management

IT audit

Formation

Bachelor's degree in Computer Science or Information Security

Description du poste

About the Role

Our client, a well-respected cybersecurity consulting firm, is seeking an experienced Information Security Consultant specializing in Risk Assessment and Management to join their team in Nelspruit, Mpumalanga . This client-facing role involves advising organizations on identifying, assessing, and mitigating information security risks. You will be responsible for conducting comprehensive risk assessments, developing risk treatment plans, and helping clients implement effective security controls to protect their assets. The ideal candidate possesses strong analytical skills, deep knowledge of risk management frameworks, and excellent client communication abilities. This role requires regular client interaction and on-site work at our Nelspruit office and client locations.

Key Responsibilities

• Conduct detailed information security risk assessments for clients across various industries.
• Identify, analyze, and document information security threats, vulnerabilities, and potential impacts.
• Develop and implement risk treatment strategies and mitigation plans tailored to client needs.
• Advise clients on the implementation of security controls based on risk assessment findings and industry best practices.
• Assist clients in developing and maturing their risk management programs.
• Evaluate client compliance with relevant security standards and regulations (e.g., ISO 27001, NIST CSF, POPIA).
• Prepare clear and concise risk assessment reports and present findings and recommendations to client stakeholders.
• Stay current with evolving threat landscapes, risk management methodologies, and security technologies.
• Collaborate with cross-functional teams within the consulting firm to deliver integrated security solutions.
• Contribute to the development of firm methodologies and intellectual property in the area of risk management.

Requirements

• Bachelor's degree in Computer Science, Information Security, Business Administration, or a related field.
• Minimum of 4 years of experience in information security, with a strong focus on risk assessment, risk management, or IT audit.
• In-depth knowledge of risk assessment methodologies (e.g., FAIR, OCTAVE) and frameworks (e.g., ISO 31000, NIST RMF, ISO 27005).
• Understanding of common security controls and technologies across various domains (network, application, data, cloud).
• Experience in conducting compliance assessments against standards like ISO 27001, NIST CSF or PCI DSS.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills, with the ability to effectively present complex information to diverse audiences.
• Proven ability to manage client relationships and deliver high-quality consulting services.
• Relevant certifications such as CRISC, CISA, CISSP, or CISM are highly desirable.
• Willingness to travel to client sites as required.

Benefits

Our client offers a competitive salary package, comprehensive medical aid and retirement benefits, opportunities for professional growth and certifications, and the chance to work with a diverse client base. This role is based in our Nelspruit, Mpumalanga office.