Information Security Consultant

2Bsecure is seeking an experienced Information Security Consultant to join our GRC team.

The role involves providing professional consulting in corporate governance, risk management, and compliance aspects of information security and cyber defense.

Key Responsibilities

• Conducting risk assessments and compliance reviews in information security and cyber defense
• Writing and updating information security and cyber defense policies in accordance with relevant regulations and standards
• Supporting certification processes for international standards (such as ISO 27001, HIPPA, GDPR etc.) and preparing the organization for certification audits.
• Performing internal and external information security audits
• Providing consulting and guidance for projects in information security and cyber defense aspects
• Training employees on information security matters and risk awareness

Requirements

Essential

• Minimum of 2 years of experience as a GRC Consultant or similar role in information security
• In-depth knowledge of information security standards and regulations (ISO 27001, GDPR, HIPPA, Privacy Protection Regulations, etc.)
• Experience in conducting risk assessments and writing information security policies
• Ability to lead and drive processes with various stakeholders in the organization
• High level of English proficiency - reading, writing, and speaking
• Excellent interpersonal skills and ability to work in a team

Advantageous

• Relevant degrees in Computer Science / Software Engineering / Information Security
• Professional certifications (CISM, CISSP, ISO 27001 Lead Auditor)
• Experience working with regulators
• Experience in conducting information security audits
• Familiarity with GRC tools and platforms