Endpoint Security Consultant

We are seeking an experienced Endpoint Security Consultant to undertake a comprehensive review of a mixed Windows and macOS endpoint estate. This is an excellent opportunity for an Endpoint Security Consultant to assess existing security controls, governance processes and operational effectiveness across key endpoint management and security platforms., * Conduct workshops with technical, security and compliance stakeholders.

• Review and assess Microsoft Intune, Jamf Pro, Microsoft Defender for Endpoint and Tenable environments.
• Assess endpoint security baselines, configuration standards and device management practices.
• Review device compliance policies and Conditional Access controls.
• Evaluate vulnerability management processes and remediation controls.
• Assess patch management effectiveness across Windows and macOS estates.
• Review endpoint logging, monitoring and incident response capabilities.
• Map existing controls against ISO27001, SOC2, NIST CSF 2.0 and IRAP/Australian Government ISM frameworks.
• Identify security, governance and compliance gaps across the endpoint environment.
• Produce risk-ranked findings, recommendations and remediation actions.
• Define governance, ownership and reporting requirements.
• Deliver executive and technical findings presentations to key stakeholders.

• Extensive experience delivering endpoint security assessments.
• Strong hands-on experience with Microsoft Intune.
• Strong experience administering and assessing Jamf Pro environments.
• Experience with Microsoft Defender for Endpoint.
• Experience with Tenable Vulnerability Management.
• Strong understanding of endpoint compliance, configuration management and endpoint hardening.
• Proven experience in vulnerability management and remediation programmes.
• Experience working with EDR technologies and endpoint security controls.
• Strong experience mapping controls to ISO27001, NIST CSF, SOC2 and CIS Controls frameworks.
• Excellent stakeholder management and workshop facilitation skills.
• Strong technical documentation, reporting and presentation experience.
• The ability to communicate effectively with both technical and non-technical audiences.