Job Description :

We are looking for an experienced Technical Consultant Information Security to join our Information Security team and play a key role in strengthening cyber security governance across emerging technologies, AI-enabled systems, cloud platforms, and modern digital ecosystems. The ideal candidate will be responsible for evaluating security risks, establishing governance frameworks, ensuring regulatory compliance, and providing strategic security guidance to technology and business stakeholders.

This role requires a strong background in Information Security Governance, Risk & Compliance (GRC), security architecture reviews, cloud security, AI governance, and cyber resilience. You will work closely with engineering, cloud, enterprise architecture, legal, compliance, and business teams to ensure security is embedded throughout the technology lifecycle.

Key Responsibilities :

- Develop, implement, and continuously improve enterprise Information Security Governance frameworks aligned with organizational objectives.

- Lead security governance initiatives covering cloud platforms, AI-enabled applications, automation platforms, SaaS solutions, and emerging technologies.

- Conduct security maturity assessments and recommend strategic improvements to strengthen the organization's security posture.

- Evaluate technology solutions and provide security guidance during architecture reviews and digital transformation initiatives.

- Perform security risk assessments for new applications, cloud deployments, AI solutions, third-party integrations, and enterprise platforms.

- Identify cyber security risks and develop mitigation strategies aligned with business priorities.

- Define security controls based on ISO 27001, NIST Cyber Security Framework, CIS Controls, and industry best practices.

- Support implementation and maintenance of the Information Security Management System (ISMS).

- Develop and maintain enterprise security policies, standards, procedures, and governance documentation.

- Collaborate with cloud, infrastructure, DevOps, data, and application teams to integrate security into technology delivery.

- Review cloud architectures and recommend security improvements across public and hybrid cloud environments.

- Assess AI and machine learning solutions from a security, privacy, governance, and compliance perspective.

- Support security due diligence for emerging technologies, automation platforms, and digital innovation initiatives.

- Lead security assurance reviews for technology projects and business transformation programs.

- Conduct third-party security assessments and evaluate vendor security controls.

- Monitor regulatory developments and industry standards to ensure continued compliance.

- Support internal and external security audits by providing governance evidence and documentation.

- Develop security metrics, governance dashboards, and executive-level reporting.

- Promote security awareness and advise project teams on secure design principles.

- Mentor junior security professionals and contribute to continuous improvement initiatives.

Required Skills :

- Strong experience in Information Security Governance, Risk & Compliance (GRC).

- In-depth knowledge of Information Security Management Systems (ISMS).

- Hands-on experience implementing and maintaining ISO 27001-based security programs.

- Strong understanding of the NIST Cybersecurity Framework (NIST CSF).

- Experience conducting enterprise security maturity assessments.

- Expertise in security risk management methodologies.

- Strong understanding of cloud security principles across AWS, Microsoft Azure, and Google Cloud Platform.

- Knowledge of AI security, responsible AI governance, and emerging technology risk management.

- Experience performing security architecture reviews and technology risk assessments.

- Familiarity with secure software development lifecycle (Secure SDLC) and DevSecOps practices.

- Experience in identity and access management, data protection, and security controls implementation.

- Knowledge of third-party risk management and vendor security assessments.

- Strong understanding of cyber security governance within highly regulated enterprise environments.

- Ability to translate technical risks into business impact for senior stakeholders.

- Excellent stakeholder engagement and communication skills.

Technical Skills :

- Information Security Governance

- Information Security Management System (ISMS)

- ISO 27001

- NIST Cyber Security Framework (NIST CSF)

- Risk Assessment & Risk Management

- Security Maturity Assessments

- Security Governance Frameworks

- Cloud Security

- AWS Security

- Microsoft Azure Security

- Google Cloud Security

- AI Security & AI Governance

- DevSecOps

- Secure SDLC

- Identity & Access Management (IAM)

- Data Protection & Privacy

- Security Architecture Review

- Security Compliance

- Third-Party Risk Management

- Vulnerability & Risk Analysis

Preferred Qualifications :

- Bachelor's or Master's degree in Computer Science, Information Security, Cyber Security, Information Technology, or a related discipline.

- Professional certifications such as :

1. CISSP (Certified Information Systems Security Professional)

2. CISM (Certified Information Security Manager)

3. CRISC (Certified in Risk and Information Systems Control)

4. ISO 27001 Lead Implementer or Lead Auditor

5. CCSP (Certified Cloud Security Professional) preferred

- Experience working within global financial services or highly regulated enterprise environments.

- Exposure to AI governance, cloud transformation, and enterprise digital modernization programs.

Soft Skills :

- Strong analytical and problem-solving abilities.

- Excellent written and verbal communication skills.

- Strong stakeholder management and influencing capabilities.

- Ability to present security recommendations to senior leadership.

- Strategic thinking with strong business acumen.

- Excellent documentation and reporting skills.

- Ability to manage multiple priorities in a fast-paced environment.

- Collaborative mindset with experience working across cross-functional global teams.