Security Consultant - NIST/Cloud Security in भारत

Role & Responsibilities : - Lead and deliver information and cybersecurity consulting engagements for clients across various industries.- Assess clients' security posture, identify vulnerabilities, and recommend appropriate security controls and improvements.- Conduct security risk assessments, security audits, gap assessments, and compliance reviews against standards such as ISO 27001, NIST, SOC 2, PCI DSS, or relevant regulatory requirements.- Develop and review information security policies, standards, procedures, frameworks, and governance processes.- Advise clients on cybersecurity strategy, risk management, security architecture, and control implementation.- Perform security maturity assessments and develop actionable roadmaps for improving cybersecurity capabilities.- Support third-party/vendor risk assessments, security due diligence, and supplier security reviews.- Work with technical and business stakeholders to translate cybersecurity risks into business-impact-oriented recommendations.- Prepare detailed assessment reports, risk registers, executive presentations, and remediation plans.- Monitor and evaluate emerging cybersecurity threats, technologies, and regulatory requirements and advise clients accordingly.- Support incident response, business continuity, disaster recovery, and cyber resilience initiatives where required.- Lead client workshops, stakeholder meetings, presentations, and security awareness sessions.- Mentor junior consultants and contribute to project planning, delivery, quality assurance, and knowledge development.- Contribute to business development activities, including RFP/RFI responses, solution proposals, statements of work, and client https://jobeax.com/link/P7ZEtNzvTQajDqvv Candidate Profile : - 7 - 12 years of experience in cybersecurity, information security, risk consulting, security governance, or a related field.- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline. A master's degree is an advantage.- Strong understanding of cybersecurity frameworks, risk management, governance, and security controls.- Hands-on experience with one or more of ISO 27001, NIST CSF, CIS Controls, SOC 2, PCI DSS, COBIT, or similar frameworks.- Experience in conducting security assessments, audits, risk assessments, gap assessments, and compliance engagements.- Strong knowledge of areas such as cloud security, IAM, network security, application security, vulnerability management, data security, and incident response.- Experience working directly with enterprise clients and senior stakeholders.- Ability to independently manage consulting assignments from scoping and assessment through reporting and remediation.- Strong analytical, problem-solving, documentation, and presentation skills.- Excellent written and verbal communication skills, with the ability to explain complex cybersecurity concepts to both technical and non-technical audiences.- Experience managing or mentoring junior team members is preferred.- Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, CEH, CCSP, or cloud-security certifications will be an advantage.- Willingness to travel to client locations when required. (ref:hirist.tech)