IT Security Consultant (Remote)

About the role

The IT Security Consultant will work remotely to assess, design, and enhance the organization’s security controls across systems, networks, applications and data. You will partner with business and technical teams to identify risks, recommend mitigations and ensure compliance with industry standards.

Key responsibilities

• Assess security risks and vulnerabilities across IT infrastructure.
• Conduct security reviews, audits and risk assessments.
• Recommend and implement security controls and best practices.
• Support development and maintenance of security policies, standards and procedures.
• Monitor security incidents and assist with incident response.
• Perform vulnerability assessments and coordinate remediation.
• Ensure compliance with regulatory and industry security requirements.
• Review system architectures and provide security guidance for projects.
• Support identity and access management processes.
• Assist with security awareness and training programs.
• Prepare security reports and present findings to stakeholders.
• Collaborate with IT, business units and external vendors on security matters.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity or related field.
• 3‑7 years of experience in information security, cybersecurity or IT risk management.
• Strong understanding of network, application, cloud and infrastructure security concepts.
• Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework and CIS Controls.
• Experience with vulnerability management and security assessment tools.
• Excellent analytical, problem‑solving and communication skills.

Required skills

• Network security
• Application security
• Cloud security
• Infrastructure security
• ISO 27001
• NIST Cybersecurity Framework
• CIS Controls
• Vulnerability management tools
• Security assessment tools
• Identity & Access Management (IAM)
• Incident response
• Threat analysis
• Security architecture review
• Security compliance and audits
• Security policy development