Senior Consultant

Responsible: • Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the organization's systems, processes, and policies. • Develop and implement risk mitigation strategies and controls to minimize the impact of identified risks. • · Stay abreast of evolving security frameworks, regulations, and standards, such as ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST. • Collaborate with cross-functional teams to integrate security requirements into business processes and technology solutions. • Assist in the development and implementation of security policies, procedures, and guidelines to ensure alignment with regulatory requirements and industry best practices. • Serve as the primary point of contact for Data Protection Officer (DPO) duties, including overseeing data protection activities, ensuring compliance with relevant data protection regulations, and acting as a liaison between the organization and regulatory authorities or data subjects. • Provide guidance and support to internal stakeholders on security and compliance-related matters. • Conduct regular audits and assessments to monitor compliance with established security policies, procedures, and standards. • Develop and deliver training programs to raise awareness of security risks and compliance requirements among employees. Qualifications: • Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience). • Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or equivalent. • Extensive experience of at least 3-5 years in performing Risk Assessment and delivering compliance standards across diverse environments, from SME to Enterprise. • Excellent written and verbal communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences. • Ability to work independently, manage multiple projects simultaneously, and meet tight deadlines. • Strong problem-solving skills and attention to detail. • A commitment to staying up to date with the evolving cybersecurity landscape.