Cognisys

Security Engineer

• Deliver ongoing information security advisory engagements across clients and industries
• Provide practical guidance on information security risks, security programmes and improvement priorities
• Support vCISO-style advisory services and ongoing security programme development
• Assess and improve the effectiveness, maturity and sustainability of security programmes
• Prioritise security initiatives based on risk, business objectives and available resources
• Support specialist information security projects and additional client work
• Develop realistic approaches to complex security problems
• Support the development, maintenance and improvement of information security programmes
• Assess security risks, controls, processes and operating practices
• Develop and maintain security roadmaps, risk registers, remediation plans and improvement programmes
• Advise on security governance, risk management, controls, policies, procedures and operating processes
• Apply relevant frameworks, standards, regulations and industry practices
• Support security assurance and compliance activities
• Use GRC platforms and other security tooling
• Build trusted, long-term relationships with client stakeholders
• Lead client meetings, workshops and advisory sessions
• Communicate risks, recommendations and trade-offs clearly
• Manage expectations and communicate progress, challenges and dependencies
• Own defined client engagements and workstreams
• Manage competing priorities across multiple clients and projects
• Plan and organise delivery to meet agreed timelines and outcomes
• Identify risks and blockers and take appropriate action
• Contribute to scoping and shaping additional client work
• Produce clear, accurate and commercially appropriate client deliverables
• Apply Cognisys methodologies and quality standards
• Share knowledge and contribute to the wider GRC consulting team

Information Security Consultant