Our client is looking for an Intermediate Cyber Security Consultant to provide cyber security advisory and implementation support within a regulated insurance environment. The role is offered on a 12-month contract with Onsite working model and requires a consultant with strong governance, risk, and compliance (GRC) foundations, as well as practical cloud security experience. Contract Details:<ul><li>Contract Duration: 12 months</li><li>Working Model: Onsite</li></ul> Key Responsibilities<ul><li>Support the implementation, maintenance, and continuous improvement of the Information Security Management System (ISMS) in alignment with ISO/IEC 27001 standards</li><li>Conduct cyber security risk assessments and gap analyses, identifying control weaknesses and recommending remediation actions</li><li>Provide security oversight and advisory support for Azure cloud environments, including identity and access management, network security controls, logging, and monitoring</li><li>Assist with the development, review, and enforcement of information security policies, standards, procedures, and guidelines</li><li>Support regulatory and compliance requirements relevant to the insurance industry, including internal and external audits</li><li>Participate in incident response activities, including investigation, root cause analysis, and post-incident reporting</li><li>Collaborate with IT, risk, compliance, and business stakeholders to ensure security controls are embedded into systems and processes</li><li>Support vendor and third-party risk assessments and security reviews</li></ul> Key Deliverables<ul><li>ISO 27001-aligned security documentation, including policies, standards, procedures, and control evidence</li><li>Cyber security risk assessment reports and remediation plans</li><li>Cloud security assessment findings and recommendations for Azure environments</li><li>Audit support artefacts and compliance evidence packs</li><li>Incident response reports and lessons-learned documentation</li><li>Regular cyber security status reports and risk updates to key stakeholders</li></ul> Mandatory Skills &amp; Experience<ul><li>+4 years expeirence as Cyber Security Engineer</li><li>ISO/IEC 27000 series experience(non-negotiable)</li><li>Microsoft Azure certifications (non-negotiable) </li><li>Previous cyber security experience in an insurance or financial services environment</li><li>Strong foundational cyber security experience across governance, risk, compliance, incident management, and security controls</li></ul>

Intermediate Cyber Security Engineer

Required Skills

Job Description