Position Summary The Senior Consultant provides strategic cybersecurity leadership on a fractional or contractual basis. He is responsible for establishing, maintaining, and continuously improving the organization’s information security program aligned with business objectives, regulatory requirements, and industry best practices.
Key Responsibilities
· Develop and implement enterprise cybersecurity strategy and roadmap.
· Establish and maintain an Information Security Management System (ISMS).
· Conduct enterprise-wide risk assessments and maintain the risk register.
· Align security controls with ISO 27001, NIST CSF, SOC 2, CIS Controls, and IEC 62443 where applicable.
· Oversee vulnerability management, incident response, and security operations.
· Lead compliance readiness initiatives and support audits.
· Implement secure SDLC and DevSecOps practices (if applicable).
· Manage third-party and supplier security risk programs.
· Provide executive and board-level reporting on cybersecurity posture.
· Lead crisis management during major cybersecurity incidents.
Key Deliverables
· Cybersecurity Strategy & Roadmap
· Risk Register and Treatment Plan
· Information Security Policies & Procedures
· Incident Response Plan
· Compliance Gap Analysis Reports
· Executive Security Dashboard
· Annual Security Program Report
Required Qualifications
· 10+ years of experience in cybersecurity leadership roles.
· Bachelor’s degree in related Domain.
· Robust knowledge of ISO 27001, NIST CSF, SOC 2, and risk management frameworks.
· Experience preparing organizations for security audits and certifications.
· Strong executive communication and stakeholder management skills.