Security Consultant
Join a security team that is evolving its NIST framework and embedding risk thinking into every business project. You will challenge tribes, strengthen controls, and act as a trusted bridge between security ambition and operational reality.
CONTEXT
Our client, a major player in its sector, is strengthening its security posture in a landscape where financial services face relentless threat actors and rising regulatory expectations. The security team has already begun maturing its control environment around the NIST framework, but the next chapter requires a senior consultant who can move between strategy and execution. Business projects are multiplying, each with its own tribe, technology choices, and risk appetite. The organization needs someone autonomous enough to investigate control evidence, diplomatic enough to challenge assumptions, and pragmatic enough to help teams implement security measures without slowing down innovation. This is a role for a consultant who enjoys being the connective tissue between security governance and daily delivery.
ACTIVITIES
- Oversee security actions within business projects and ensure risks are identified and treated.
- Evolve the NIST framework, including control mapping, maturity assessments, and evidence management.
- Act as a key contact for regional stakeholders regarding NIST control evidence.
- Cooperate with and challenge different tribes on their implemented security measures.
- Perform security reviews, risk assessments, and gap analyses for new initiatives.
- Advise project teams on secure design, third-party risk, and compliance obligations.
- Prepare reports and presentations for security leadership and business sponsors.
- Contribute to security awareness and continuous improvement across the organization.
EXPECTED ACHIEVEMENTS
- A more mature NIST control environment with clear evidence and ownership.
- Security risks consistently integrated into business project decisions.
- Stronger collaboration between security, engineering, and business tribes.
- Reduced friction in audits and regulatory reviews through organized evidence.
- A culture where security is challenged, debated, and continuously improved.
ENVIRONMENT
- NIST Cybersecurity Framework and related control frameworks.
- Security risk management, gap analysis, and evidence tracking tools.
- Financial services or similarly regulated sector constraints.
- Collaborative, tribe-based organizational model.
- Methodologies: autonomy, stakeholder challenge, secure project governance, and continuous improvement.