Information Security Risk Consutlant

This is a hands-on, technical role for an experienced security professional who thrives on identifying and mitigating risk before it becomes a problem. You’ll work three days per week from the office as part of a global security team, collaborating closely with product owners, subject matter experts, and development teams to keep applications, infrastructure, SaaS, and AWS environments secure. The role offers real ownership: from data collection through interviews to presenting findings directly to stakeholders.

You will:

• Conduct in-depth security risk assessments on IT systems and applications, including interviewing subject matter experts to collect data
• Facilitate threat modeling sessions and present findings to relevant stakeholders
• Support application owners with their security control self-attestation checks
• Perform threat intel-based, highly technical security assessments across applications, infrastructure, SaaS, and AWS

• 7+ years of experience in IT security, application security, or infrastructure security
• Professional qualification such as CISSP, CCSP, CEH, CISA, CISM, or CCSK
• Broad knowledge of IT and security capabilities and processes, including secure SDLC / security by design
• Proven experience performing security assessments and translating generic security requirements into specific, practical guidance
• Strong experience with information security documentation, report writing, and reviewing
• Excellent stakeholder management skills in a multicultural, international environment
• Strong verbal and written communication skills in English