Security Consultant – IT Security Process Specialist

About the role

The IT Security Process Specialist designs, implements and maintains security processes that protect the organisation’s information systems. Working closely with the CISO and cross‑functional teams, the role builds governance frameworks, optimises operational security workflows and ensures compliance with internal and external standards.

Key responsibilities

• Collaborate with the CISO to define and maintain documented security governance frameworks aligned with regulatory requirements.
• Develop, enforce and review IAM and RBAC procedures, including onboarding/off‑boarding and privileged access policies.
• Manage the vulnerability management lifecycle: risk assessment, prioritisation, remediation planning and coordination with IT teams.
• Define patching standards, schedule updates and verify compliance with client security requirements.
• Identify process gaps, propose corrective actions and drive continuous‑improvement initiatives.
• Support security incident response by keeping process documentation current and addressing root‑cause governance issues.
• Provide annual security awareness training for staff.

Required profile

• Bachelor’s or Master’s degree in IT or a related field.
• Relevant certifications such as ITIL, CISM or CISSP.
• Strong analytical abilities and excellent communication skills.
• Experience creating documentation, governance models and improvement processes.

Required skills

• Deep knowledge of network technologies: TCP/IP, firewalls, routing, switching, VLANs and security architectures.
• Proficiency with major operating systems: Windows Server, Linux Red Hat and other enterprise platforms.
• Expertise in IAM, RBAC, vulnerability management and patch management processes.
• Familiarity with security frameworks such as ISO 27001, NIST and CIS Controls.