Cybersecurity Consultant L3

The Cybersecurity Consultant (L3) is an advanced consulting role responsible for assessing cybersecurity risks, control effectiveness, compliance posture and cloud security across client environments. The primary objective of this role is to independently plan and perform security assessments, identify control gaps and vulnerabilities, and provide clear, evidence-based recommendations that support risk treatment and compliance outcomes. The Cybersecurity Consultant (L3) focuses on complex security risk assessments, IM8/security compliance, vulnerability assessment (VA), security configuration review, audit, cloud security posture management (CSPM), incident management, vulnerability management and cloud security.

The consultant must be sufficiently independent from personnel implementing the controls being assessed. This role may also contribute to or support project work as and when required. Key

• Plans and conducts cybersecurity risk assessments across infrastructure, applications and cloud environments. · Assesses compliance against IM8and other applicable security requirements using documented evidence and defined assessment criteria. · Performs vulnerability assessments and security configuration reviews, analyses findings and validates risk and remediation priorities. · Supports security audits by preparing assessment plans, reviewing evidence, documenting observations and tracking findings to closure. · Reviews cloud security posture through CSPM fin