Information Security Consultant

Company Description Intensity Global Group (IG) is a cybersecurity technology consulting company specializing in information security, incident response, and cyber intelligence for complex organizations. Since 2008, IG has focused on identifying unknown attacks and hidden vulnerabilities using attacker-oriented methodologies that simulate how real hackers plan and execute intrusions.

Role Description This is a full-time, hybrid Information Security Consultant role based in Petah Tikva/Jerusalem with flexibility to work from home part of the time. The Information Security Consultant will assess clients’ security postures, identify vulnerabilities, and design practical solutions aligned with regulatory requirements and industry best practices. Daily responsibilities include conducting risk and gap assessments, advising on information security management systems, reviewing security architectures, and recommending improvements across network, data, and application layers. The role involves collaborating with client stakeholders to develop security policies and procedures, supporting incident response activities, and translating technical findings into clear, actionable reports and presentations. The consultant will also contribute to ongoing security projects, support implementation of security controls and technologies, and stay current with evolving cyber threats and standards.

• Risk & Architecture Assessments: Conduct end-to-end security risk assessments, threat modeling, and architecture reviews for enterprise systems, networks, and cloud infrastructure.
• Governance, Risk & Compliance (GRC): Guide clients through compliance initiatives and certifications (e.g., ISO 27001, SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS).
• Security Strategy & Policies: Design, review, and implement tailored information security policies, procedures, standards, and incident response plans.
• Third-Party Risk Management (TPRM): Evaluate third-party vendor risks and deliver structured remediation recommendations.
• Technical Audits & Controls: Review network security, identity and access management (IAM), vulnerability assessments, and endpoint security configurations.
• Incident Preparedness: Assist clients in designing incident response protocols, conducting tabletop exercises, and establishing recovery strategies.
• Advisory & Stakeholder Engagement: Present complex security findings, risk reports, and strategic roadmaps to C-level executives and technical management.

• Experience: 4+ years of hands-on experience in Information Security consulting, cybersecurity architecture, or IT risk management.
• Education: B.Sc. in Computer Science, Cybersecurity, Information Systems, or a related technical field (or equivalent practical experience).
• Framework Knowledge: Deep familiarity with security frameworks and standards such as ISO 27001, SOC 2, NIST, CIS Controls, and GDPR.
• Cloud & Infrastructure: Hands-on experience assessing cloud environments (AWS, Azure, or GCP) and core infrastructure components (Firewalls, Active Directory, IAM, EDR, SIEM).
• Certifications (Strong Advantage):
• CISSP, CISA, CISM, CRISC, or ISO 27001 Lead Auditor / Implementer.
• Cloud certifications (e.g., AWS Certified Security Specialty, CCSP).
• Communication & Soft Skills: Excellent analytical, problem-solving, and client-facing skills with the ability to convey complex technical concepts to non-technical stakeholders.

You could send your CV to: [email protected]