Consultant - Cybersecurity, Application Architecture

Overview

This role is designed to drive and support cybersecurity efforts by evaluating security risks, enhancing controls, ensuring compliance with cybersecurity mandates, collaborating with internal teams, and safeguarding Elm’s information assets, systems, and digital platforms. It plays a critical role in aligning cybersecurity measures with the company’s strategic and operational goals to facilitate secure business functions and improve cybersecurity maturity in accordance with policies, regulations, and standards.

Key Responsibilities

• Lead cybersecurity governance tasks to ensure they meet approved policies, standards, and regulatory expectations.
• Assist in reviewing and implementing cybersecurity frameworks, procedures, and controls.
• Engage stakeholders to ensure understanding and execution of cybersecurity obligations across designated areas.
• Perform cybersecurity risk assessments for various systems, services, processes, and initiatives, identifying vulnerabilities, threats, and control gaps.
• Develop practical recommendations for risk mitigation and coordinate follow-ups on risk treatments.
• Evaluate the effectiveness of cybersecurity controls, validate adherence through evidence review, and advocate for enhancements in control practices.
• Support compliance-related activities including evidence gathering, gap analysis, remediation tracking, and preparation of reports for management.
• Advise business and technical teams on cybersecurity best practices and secure implementation of projects.
• Assist in monitoring security alerts and incidents, collaborate on investigations, and help improve detection and response.
• Aid vulnerability assessment efforts by analyzing findings, prioritizing risk responses, and ensuring remediation in collaboration with system owners.
• Stay updated on emerging cybersecurity threats relevant to Elm’s environment and contribute to risk awareness.
• Produce cybersecurity reports and dashboards covering risk, compliance, incident trends, and improvement plans.
• Follow departmental policies and procedures, including safety and environmental protocols, to ensure consistent, safe, and secure operations.
• Maintain compliance with information security policies to protect data confidentiality and integrity.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering, or related disciplines.
• Professional cybersecurity and risk management certifications are advantageous.

Experience

• Between 4 to 6 years in areas such as cybersecurity governance, risk and compliance, information security, security operations, or vulnerability management.
• Proven experience in risk assessments, control reviews, compliance support, stakeholder coordination, cybersecurity reporting, and contributing to security enhancements.