We’re Hiring: Senior Consultant I - Security & Privacy!

Looking for a role that fosters collaboration, creativity and career growth in a vibrant office environment? We got you covered!

We are currently on the lookout for a Senior Consultant I - Security & Privacy to join our team at Cloudstaff, the #1 workplace everywhere! Think you qualify for the role? Attach a 1-2 minute video intro and introduce yourself to us so we can meet you virtually. Attach this together with your updated CV to become a priority applicant!

Role: Senior Consultant I - Security & Privacy

Work Arrangement: Hybrid

Location: Philippines - Angeles (Pampanga) / Cebu

Schedule: Morning Shift

Job Description:

Security & Privacy (S&P) consultants are expected to have responsibility for extensive client contact, staff training, management & development; and liaising with third parties You will be skilled and experienced at managing the whole project lifecycle for IT general controls audit, cyber security and information security services.  

Key Responsibilities: 

• Perform IT / Cyber / Business Continuity / technology risk assessments, technical security related reviews, assess the effectiveness of processes/controls and risks related to third party organisations.
• Executing and completing individual IT, cyber security and resiliency audits and special project reviews relating to various applications, IT infrastructure and other relevant IT domains.
• Conducting independent risk-based IT, cyber security and resiliency assessments to assess the adequacy and effectiveness of internal controls, the reliability and integrity of the client’s business and IT systems.
• Leasing consulting and audit engagements simultaneously with numerous engagement team members per audit, including assisting with planning, execution and scheduling staff.
• Undertaking or arranging to undertake special consulting or other reviews as required. These may include system software reviews, new system development technical evaluations, post implementation reviews, contingency planning reviews, logical / physical access reviews and installation reviews.
• Assist in the planning of client deliverables (i.e. strategic internal audit plan, scope documents).
• Responsible for the execution of fieldwork and documentation of findings (i.e. maintain the audit file).
• Providing IT general controls and application controls audit support to external audit.
• Determining the objectives, scope and extent of each audit and ensure that the audit is professionally and efficiently completed within deadlines.
• Assist in business development activities of the firm.
• Coordination with other divisions.
• Address technical issues and assist in preparing technical position papers.
• Undertaking development of team members.
• Assisting with management and co-ordination of the audit team including training, mentoring and methodology compliance.
• Identifying opportunities for improvement to operational efficiencies and effectiveness.
• Maintaining appropriate and adequate documentation for each audit to a standard as required by auditing standards.
• Identification of findings and issues, and assisting in the drafting of client reports and discuss with relevant management as required.
• Liaising, and presenting audit results to information system staff and client management.
• Remaining abreast with technological enhancements in auditing and IT

Qualification and requirements:

Education Requirements

Essential

• Successful Criminal Record Screening Clearance.
• Relevant tertiary degree and/or qualification is essential. 

Demonstrated Experience & Attributes

Essential

• Minimum 5 year’ Professional Services experience in Cyber / IT technical delivery, Business Continuity, IT audit, internal controls, or risk management.
• Experience performing security risk assessments, testing or auditing of cybersecurity or information security standards or governance frameworks (e.g. one or more of COBIT, NIST Cyber Security Framework, ASD Top 35 and Essential Eight, PCI DSS, CIS Critical Security Controls Top 20, PSPF, Australian Government Information Security Manual, VPDSS, ISO/IEC 27001, Cloud Security Alliance Guidance, Australian Privacy Principles, GDPR).
• Experience with leading engagements on Business Continuity (BCP), IT Disaster Recovery (IT DRP), assessment of recovery plans for critical applications and systems, Incident management as well as review against frameworks such as ISO 22301, BS 25999
• Experience in performing engagements where teams are completing various technical testing assessments and be able to translate technical findings and articulate recommendations for non-technical client staff.
• Demonstrated knowledge of control best practices in IT general controls and applications.
• Demonstrated Knowledge of IT processes, project management, applications, databases, operating systems and network infrastructure to apply better practice guidance and identify opportunities for improvement.
• Outstanding interpersonal and communications skills, able to communicate effectively in verbal and written format with technical and non-technical audiences.
• Strong analytical and written communication skills including documenting customer reports and presentations.
• Ability to develop effective solutions and enhancements in an innovative manner.
• Strong attention to detail and prioritising skills, able to produce high quality work autonomously and as part of a team.
• Ability to add value by providing a high standard of service in response to client demands. 

Desireable

• Demonstrated knowledge in data analytics / computer assisted audit techniques using IDEA, ACL, SQL or other relevant data analytical tools. 

Non-negotiable skills & requirements:

• Minimum 5 year’ Professional Services experience in Cyber / IT technical delivery, Business Continuity, IT audit, internal controls, or risk management.
• Experience performing security risk assessments, testing or auditing of cybersecurity or information security standards or governance frameworks (e.g. one or more of COBIT, NIST Cyber Security Framework, ASD Top 35 and Essential Eight, PCI DSS, CIS Critical Security Controls Top 20, PSPF, Australian Government Information Security Manual, VPDSS, ISO/IEC 27001, Cloud Security Alliance Guidance, Australian Privacy Principles, GDPR).
• Experience with leading engagements on Business Continuity (BCP), IT Disaster Recovery (IT DRP), assessment of recovery plans for critical applications and systems, Incident management as well as review against frameworks such as ISO 22301, BS 25999
• Experience in performing engagements where teams are completing various technical testing assessments and be able to translate technical findings and articulate recommendations for non-technical client staff.
• Demonstrated knowledge of control best practices in IT general controls and applications.
• Demonstrated Knowledge of IT processes, pro

Perks & Benefits (Work From Home/Hybrid)

• Comprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment  
• Flexible leave credits which may be used for vacation, emergency and sick leaves  
• Quarterly perks boxes for WFH staff, offering groceries and snacks to keep you fueled  Superb and exciting Mid-Year Parties – with items to give away and cash prizes!  
• Endless opportunities for career advancement  
• Annual Performance Review with Salary Increase  
• We set you up for success with a company-provided PC/Laptop and fiber internet connection  
• Tech-on-wheels Support  
• Participate and join our CS Social Clubs and Special Interest Groups to connect with colleagues  
• International career growth and connections  
• Unlimited cash incentives for hired referrals  
• Mental Wellness Employee Assistance program through Lifeworks  
• In-house psychiatrist available to support employees' well-being  
• Become part of the Employee Share Units program  
• Cloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc.

• Cloudstaff : Build Your Career, Anywhere
• Established in 2005, Cloudstaff is a leading outsourcing company that empowers businesses to thrive through smarter talent solutions. We're passionate about creating a work environment that fosters your professional growth and overall well-being.

• Why Cloudstaff is the #1 Workplace?
• • Award-winning Culture: We're committed to building the #1 Workplace Everywhere, with a proven track record of staff engagement initiatives and industry recognition
• • Invest in You: We support your development through comprehensive training programs, mentoring and opportunities for career advancement
• • Thrive as an Individual: We offer a strong work-life balance with flexible schedules, meaningful perks and a collaborative team environment.

• **To become a priority applicant, please share a 1-2 minute video introduction detailing you experience in this specific role. . Please use a clean, distraction-free background and speak clearly and articulately.