Information Security Consultant/Expert

We are looking for a highly experienced Information Security Consultant / Expert to lead and oversee the organization's information security governance, risk, compliance, assurance, and security improvement activities. The role will be responsible for developing and executing the information security strategy and roadmap, establishing security policies and standards, conducting risk and control assessments, overseeing regulatory compliance, and managing third-party security risks.Supervise and oversee information security governance, risk, compliance, and assurance activities. Lead and guide the team in security risk assessments, control reviews, and security compliance activities. Supervise third-party/vendor security assessments and associated risk management activities. Monitor compliance with applicable cybersecurity regulations, standards, and organizational requirements. Coordinate with internal and external auditors, regulators, and security service providers. Mentor and provide direction to information security team members and ensure effective delivery of assigned activities. Develop and execute SDD s information security strategy and roadmap in alignment with business goals, industry standards, and regulatory requirements. Establish and maintain information security policies, standards, guidelines, and procedures. Identify and assess potential security risks and vulnerabilities through risk assessments and develop risk mitigation strategies and controls. Develop and maintain an incident response plan to address security incidents effectively. Coordinate incident response activities, including detection, analysis, containment, eradication, and recovery. Oversee the implementation and management of security controls, technologies, and solutions. Conduct periodic security audits, assessments, and penetration testing to evaluate the effectiveness of security controls and identify areas for improvement. Evaluate and manage the security risks associated with third-party vendors and service providers. Coordinate with SOC and technical teams for security incidents, risk remediation, and corrective actions. Prepare and deliver security reports, metrics, and updates to stakeholders, and relevant committees. Provide leadership, guidance, and mentorship to the information security team. Manage and allocate resources effectively to meet security objectives. Communicate project progress, status, risks, and issues to relevant stakeholders and senior management. Engage and manage relationships with project stakeholders, including business owners, project sponsors, vendors, and external partners. Review and provide security oversight for projects, applications, infrastructure, cloud services, and technology changes. Review security exceptions, risk acceptance requests, and remediation plans. Develop and monitor information security KPIs, KRIs, audit findings, and management reports. Identify security gaps and lead initiatives to improve the organization's overall security posture. Provide security guidance and advisory support to management and business/technical stakeholders.

Desired Candidate Profile

Supervise and oversee information security governance, risk, compliance, and assurance activities.
Lead and guide the team in security risk assessments, control reviews, and security compliance activities.
Supervise third-party/vendor security assessments and associated risk management activities.
Monitor compliance with applicable cybersecurity regulations, standards, and organizational requirements.
Coordinate with internal and external auditors, regulators, and security service providers.
Mentor and provide direction to information security team members and ensure effective delivery of assigned activities.
Develop and execute SDD s information security strategy and roadmap in alignment with business goals, industry standards, and regulatory requirements.
Establish and maintain information security policies, standards, guidelines, and procedures.
Identify and assess potential security risks and vulnerabilities through risk assessments and develop risk mitigation strategies and controls.
Develop and maintain an incident response plan to address security incidents effectively. Coordinate incident response activities, including detection, analysis, containment, eradication, and recovery.
Oversee the implementation and management of security controls, technologies, and solutions.
Conduct periodic security audits, assessments, and penetration testing to evaluate the effectiveness of security controls and identify areas for improvement.
Evaluate and manage the security risks associated with third-party vendors and service providers.
Coordinate with SOC and technical teams for security incidents, risk remediation, and corrective actions.
Prepare and deliver security reports, metrics, and updates to stakeholders, and relevant committees.
Provide leadership, guidance, and mentorship to the information security team. Manage and allocate resources effectively to meet security objectives.
Communicate project progress, status, risks, and issues to relevant stakeholders and senior management.
Engage and manage relationships with project stakeholders, including business owners, project sponsors, vendors, and external partners. Review and provide security oversight for projects, applications, infrastructure, cloud services, and technology changes.
Review security exceptions, risk acceptance requests, and remediation plans.
Develop and monitor information security KPIs, KRIs, audit findings, and management reports.
Identify security gaps and lead initiatives to improve the organization's overall security posture.
Provide security guidance and advisory support to management and business/technical stakeholders.