Cyber Security Consultant

Role: Senior Associate

Years of Experience: 4–6 Years

Location: Bangalore**

Educational Qualification

• Bachelor’s degree in Computer Science, Information Technology, Electronics, Electrical Engineering, Cybersecurity, or a related discipline.
• Professional certifications strongly desirable:
• ISO/IEC 27001 Lead Implementer or Lead Auditor
• CISSP, CISM, or equivalent global certifications
• IEC 62443 Practitioner/Expert level certifications

Job Summary

The Senior Associate supports the delivery of cybersecurity consulting engagements across diverse client environments. The role involves conducting cybersecurity gap and risk assessments, supporting the implementation of leading global security frameworks, and developing structured, well‑documented security policies and procedures.

The position requires strong analytical capabilities, hands‑on execution, and the ability to translate technical findings into business‑relevant insights. The Senior Associate will work closely with clients and internal teams, contribute to proposal development, and mentor junior team members. Exposure to complex, IP‑sensitive technology environments is an advantage. Semiconductor industry experience is preferred.

Key Responsibilities

• Conduct comprehensive cybersecurity gap assessments across client environments, evaluating governance, processes, and technical controls.
• Design, develop, and implement information security frameworks aligned with:
• ISO/IEC 27001:2022
• NIST Cybersecurity Framework (CSF) 2.0
• NIST SP 800‑53
• Other applicable industry standards
• Perform risk assessments covering:
• Cybersecurity and information security risks
• Business continuity and operational resilience
• Data protection and privacy risks
• Develop and document cybersecurity policies, standards, procedures, and guidelines aligned with global standards and contractual requirements.
• Lead third‑party security assessments, audits, and maturity evaluations, delivering risk‑prioritized recommendations.
• Support organizations in improving security maturity, including risk management, control design, remediation planning, and continuous improvement.
• Manage end‑to‑end client engagements including:
• Proposal development and RFP responses
• Engagement planning and execution
• Stakeholder communication, delivery, and reporting
• Collaborate effectively with cross‑functional teams such as IT, engineering, legal, compliance, and business leadership.

Required Skills & Experience

• Strong understanding of cybersecurity risk management, governance, and control frameworks.
• Ability to translate technical findings into clear business insights.
• Strong documentation and executive‑level reporting skills.
• Ability to work across diverse client environments and operating models.
• Capability to drive compliance maturity and build strong stakeholder relationships.
• Understanding of technology‑ or IP‑driven environments (e.g., advanced manufacturing, semiconductor) is a plus.
• Awareness of cybersecurity considerations in mixed IT and engineering/OT environments.

Competencies

Accountability | Customer Centricity | Collaboration | Integrity | Perseverance | Learning Mindset | Networking | Communication Skills

Keywords for Job Portals

1. Cybersecurity Compliance
2. Governance, Risk and Compliance (GRC)
3. IEC 62443
4. IoT Security
5. NIST CSF
6. NIST Gap Assessment