Cybersecurity Consultant

Job Description

Deliver cybersecurity support and strategic guidance to ensure system operations comply with Government policies, safeguarding the Authority’s environment through proactive risk management and innovative security solutions.

Responsibilities

Deliver cybersecurity support for system operations by reviewing, designing, and implementing security measures, processes, and controls aligned with Government policies
Evaluate security audit reports and assessments including vulnerability assessments, penetration testing, host configurations, IT general controls, and risk assessments to identify security gaps
Perform reviews and gap analyses to provide actionable recommendations in monthly reports ensuring compliance with client and Government requirements
Monitor and mitigate known vulnerabilities and risks within the Authority’s environment and systems to maintain a secure operational posture
Conduct comprehensive cybersecurity assessments to identify potential vulnerabilities and risks in client systems and processes
Design and oversee the implementation of cybersecurity solutions that protect the Authority’s environment against evolving threats and attacks
Review and validate system security posture, policies, and procedures to ensure adherence to best practices and standards by appointed contractors and systems
Provide expert guidance and strategic recommendations on cybersecurity technologies and risk management approaches
Deliver security awareness training to the client and appointed contractors to promote a culture of security vigilance
Monitor, investigate, and respond to security incidents and breaches, conducting forensic analyses as necessary to support incident resolution
Stay informed on emerging cybersecurity threats, trends, and technological advancements to continuously enhance security strategies
Preferred competencies and qualifications

Bachelor’s degree in computer science, electrical/computer engineering, IT, or a related field
Hands-on experience with government security ICT/SS policies, cybersecurity standards, governance, risk, and data management frameworks within the government sector
Experience conducting security assessments including risk analysis, vulnerability scanning, penetration testing, configuration reviews, and IT controls
Strong knowledge of ICT infrastructure, applications, and web/cloud services
Preferred certifications: CREST, CRISC, CGEIT, CISSP