Senior Consultant - IT Risk Assessment - Big4

We are hiring IT Risk Assessment personnel for one of the Big4

Skill Set :

- In depth knowledge of information security, risk management industry frameworks and standards NIST, OWASP, SANS, ISO-27001/2

- Working experience with enterprise risk management programs, privacy, data security and control issues with technologies such as Cloud, SaaS based applications, Linux,Windows, and Vulnerability Assessment.

- Possession of industry certifications - CISSP, CISA, CISM, CEH, ISO27001 LA/LI

- Detailed knowledge and experience with network and applications protocols.

- Sound knowledge of latest encryption standards and techniques, PKI Infrastructure, Access controls and their types.

- Understanding of the business processes and associated risks enabled by various IT solutions.

Responsibilities :

- To assess and identify the potential risks that may hinder the reputation, safety, security and financial prosperity of their organisation.

- Performing information security risk assessments, understanding threats, vulnerabilities and exposures associated with confidentiality, integrity and availability of information and serves as an IT Risk Management.

- To assist the client in the identification, testing and implementation of 'best practice' security solutions

- Ensure that IT architecture, configuration, access controls, auditing and monitoring meet the organisation's security requirements and comply with all applicable regulations

- Assist in the review of major vendor contracts/SOWs, proposed infrastructure design

- Risk assessment, which involves analysing risks as well as identifying, describing and estimating the risks affecting the business

- Ensure that application architecture, configuration, access controls, auditing and monitoring for core applications in support of business processes meet the organisation's security requirements and comply with all applicable regulations

- Reviewing and quantifying the organisation's 'risk appetite', i.e. the level of risk they are prepared to accept

- Risk reporting in an appropriate way for different audiences, for example, to business heads to ensure they are aware of risks relevant to their parts of the business and to managers/individuals to understand their accountability for individual risks