Information Security Consultant
职位标题：信息安全顾问角色目的提供专家咨询服务，加强企业的信息安全立场。评估风险，建议解决方案，并确保与商业目标，监管要求和行业最佳实践协调安全倡议。关键责任 ·开展整个企业的风险评估，安全审查和漏洞分析 ·制定，审查和推安全政策，标准和程序 ·将安全策略和举措与商业目的和监管要求相一致 ·提供安全控制和架构设计和实施指导 ·支持监管合规工作和审计准备活动 ·与 IT,风险和业务利益相关者合作，将安全最佳实践纳入项目中 ·向高级管理层和利益相关方提供明确的报告，演示和建议 需要经验和技能 · 7年以上信息安全，风险管理或安全咨询的经验 ·对安全框架，标准和监管要求 （ISO 27001,NIST,CIS,GDPR 等）的强大知识 ·执行风险评估，漏洞评估和安全顾问工作的经验证明 ·优秀的利益相关者的管理，沟通和演示能力 · 能够将复杂的安全概念转化为可行的业务建议。• 有云安全架构和咨询经验 (AWS,Azure,GCP) · CISSP,CISM,CRISC 或 ISO 27001等相关证书；•熟悉新兴的安全技术和威胁智能知识。•与安全架构设计和安全软件开发实践有实践经验。· 在金融服务，关键基础设施或高度监管环境中之前的经验。原创发布在喜马拉雅山。
查看英文原文
Job Title : Information Security Consultant
Role Purpose
Provide expert advisory services to strengthen the enterprises information security posture. Assess risks, recommend solutions, and ensure alignment of security initiatives with business objectives, regulatory requirements, and industry best practices.
Key Responsibilities
- Conduct enterprise-wide risk assessments, security reviews, and gap analyses
- Develop, review, and recommend security policies, standards, and procedures
- Align security strategies and initiatives with business goals and regulatory requirements
- Provide guidance on the design and implementation of security controls and architecture
- Support regulatory compliance efforts and audit readiness activities
- Collaborate with IT, risk, and business stakeholders to embed security best practices across projects
- Deliver clear reports, presentations, and recommendations to senior management and stakeholders
Required Experience & Skills
- 7+ years of experience in information security, risk management, or security consulting
- Strong knowledge of security frameworks, standards, and regulatory requirements (ISO 27001, NIST, CIS, GDPR, etc.)
- Proven experience performing risk assessments, vulnerability assessments, and security advisory work
- Excellent stakeholder management, communication, and presentation skills
- Ability to translate complex security concepts into actionable business recommendation
Nice to Have
- Experience in cloud security architecture and advisory (AWS, Azure, GCP)
- Relevant certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor
- Familiarity with emerging security technologies and threat intelligence
- Hands-on experience with security architecture design and secure software development practices
- Prior experience in financial services, critical infrastructure, or highly regulated environments
Originally posted on Himalayas