Cyber Security senior consultant
About this position
As a Cybersecurity experienced consultant, you will help and support our clients manage current and evolving threats.
You will define and implement security measures to protect them against these evolving cyber threats so as to ultimately support them in achieving their business objectives.
- Define and implement information security framework including policies, processes, procedures, standards, indicators (KPIs, KRIs, KCIs);
- Provide expert advice and guidance to clients on cybersecurity operations,
- Monitor and analyse security systems to identify potential threats and vulnerabilities and support for the implementation of mitigation measures;
- Assist our clients’ (Chief) Information security Officers or IT security officers in their day-to-day operations;
- Define and implement cybersecurity roadmap supporting our clients to identify their priorities, implementation costs, potential for tooling;
- Support our clients in their transformation journey following ISO standards and frameworks (ISO 27001, ISO 27005, ISO 22301 etc.), Digital Operational Resilience Act (DORA), CSSF circulars requirements (on IT, Information Security and Outsourcing (cloud based IT and non-cloud based IT)), PSD2 or NIS2 requirements.
- As a Forvis Mazars team member, you will be constantly engaged with projects and opportunities that will develop your skills and advance your career.
Preferred experience
- Master’s degree in Information Technology / Information Security / Cyber Security, Engineering in Computer Science, Management of Information Systems Security, Computer Science with a specialization in Information Security, IT Networks, Cloud computing, or a related field;
- 3 to 5 years experience in Cyber Security / Cyber Risk consulting;
- Proven consulting skills and experience of working in large complex environments delivering engagements in some of the areas noted above;
- Background in IT and Security risk management and technical frameworks;
- Experience of the regulatory requirements and standards such as ISO, DORA, NIS2, CSSF requirements (on IT, Information Security and Outsourcing (cloud based IT and non-cloud based IT)), PSD2 may be an added advantage;
- Ability to communicate effectively with team members and clients;
- Fluent in spoken and written English, fluency in French may be an advantage
- Relevant certifications like CISSP, CISM, ISO 27001 Implementer, ISO 27005 Risk Manager, etc. are an advantage