Role purpose
Assess client data-security risks and support the design and implementation of security controls, evidence and remediation under client-approved authority.
Key responsibilities
- Deliver QDKC-aligned client work using the official guides, templates and frameworks relevant to the engagement.
- Assess client evidence, facilitate workshops and produce traceable recommendations or implementation deliverables.
- For client engagements, support risk assessments, classification and control selection.
- Review client evidence and advise on identity, access, encryption, logging and secure configuration.
- Help clients monitor security events and support incident handling.
- For client engagements, assess projects, data sharing and platform changes for security risk.
- Transfer knowledge to client personnel and document decisions, assumptions, dependencies and handover requirements.
- Respect client governance: consultants advise, facilitate and deliver, but do not replace the client's accountable owners, approvers or governance bodies.
Recommended minimum requirements
Education: Bachelor's degree in cybersecurity, computer science, information systems or a related field.
Experience: Typically 4-8 years in information security, security engineering or technology risk.
Core competencies: Security controls, IAM, Risk assessment, Monitoring, Incident response, Secure architecture
Preferred certifications
Preferred, but not mandatory:
- CISSP for senior positions
- CISM
- Relevant cloud-security certification
Focus areas
Security controlsIAMRisk assessment
Ready to apply for this role?
Apply for Data Security ConsultantDon't see the perfect fit?
We're always looking for exceptional people. Send us your CV and tell us how you'd contribute to the DAI mission.