Security Consultant

Claranet Limited

About The Role

The GRC Security Consultant is part of the Cyber Practice.

The key objectives and results will be to:

• Successful delivery of Cyber Practice function service offerings in line with employee capabilities, experience, certifications, and training/mentoring
• Provide, ongoing support and mentoring of the GRC team
• Ensure customer satisfaction by delivering Cyber Security function’s services to a high-quality standard, meeting customer’s needs
• Support a knowledge sharing culture between team members
• Play an active role in Claranet’s efforts in service development, improvements, and optimisation
• Support cross-function collaboration to facilitate effective communication and collaboration between Claranet stakeholders to help Claranet meet its vision

QSA Specific (Where Applicable):

• Perform a range of PCI DSS consultancy covering the Cyber Practice function’s range of PCI QSA service offerings consisting of, but not limited to:
  • cardholder data environment mapping exercises
  • gap analysis
  • assisted SAQ submissions
  • Report on Compliance (ROC) assessments
  • general PCI QSA consultancy
  • de-scoping recommendations/advice
  • architecture reviews
  • internal Report on Compliance (ROC) assessments

Teams to collaborate with

• Customer Experience and Managed Services – ensure we are consistently providing the best service to our customers, proactively monitoring their needs, and integrating their feedback into our future portfolio and propositions.
• Customer Success and Growth – ensure that the portfolio is up to date, meets customer needs, enables cross and up selling, and provide pre-sales support when required.
• Portfolio, Alliances & Technology Practices – support efforts to embed Cyber Practice function services into customer solutions.
• Finance & Corporate Development – submission of any work-related expenses.

About You

Behavioural competencies – organisational and behavioural fit

• Customer facing, able to represent Claranet confidently and professionally
• Willing to travel to deliver onsite work as required
• Ability to identify and work with colleagues to deploy improvements to delivery processes
• Self-motivated and able to work in an independent manner as well as part of a dynamic team
• Excellent written and oral communications skills
• Excellent attention to detail
• Good numeracy and organisational skills
• Positive, collaborative, and enthusiastic

Critical competencies – technical fit

• Three years’ experience completing PCI DSS consultancy projects and assessments
• Three years’ experience completing complex ROCs
• Three years’ experience leading own security consultancy projects/assessments/audits
• Aptitude for understanding, interpreting, and applying objective standards to specific responses
• Working under pressure of deadlines and structuring workload accordingly
• Problem-solving, helping others to understand complex ideas
• Providing advice and guidance in customer-facing situations
• Ability to work to tight deadlines, prioritise and manage workload
• Deep knowledge and understanding of security technologies
• Deep knowledge and understanding of networking
• Ability to quickly learn and understand new skills and technologies specific to the Cyber Security industry
• Take own initiate to expand information security knowledge
• Ability to write concise, accurate and timely reports

Desirable competencies

• Experience leading audits/assessments against security framework (i.e. ISO 27001, PCI DSS, Cyber Essentials)
• GDPR Experience
• SOC 2 Experience
• NIST Experience
• Full UK driving license (for UK recruitment)
• Experience managing client projects
• Information security consulting experience

Position Summary

As a GRC Security Consultant working within the Cyber Practice, your primary role, based upon your competencies, experience and certifications, will be delivering a variety of GRC (Governance, Risk and Compliance) services to customers. GRC services will include, but not limited to; threat modelling, business impact assessment, security reviews and risk assessments, PCI DSS related consultancy, ISO 27001 consultancy and auditing, ASSURE Auditing, Cyber Security Assessments, Policy & Procedure reviews, and data protection consultancy. You will compose your findings into a concise report and interact closely with customers to help articulate advice and guidance contained within the final reports.

You will also be expected to assist in the development of new service offerings and maintaining existing services to ensure Claranet continues to deliver cutting edge consultancy meeting client expectations and needs in support of Claranet’s vision. Working within other GRC areas may also be expected as new service offerings are developed.

Role Mission

Claranet UK’s strategy is to build long-term, trusted relationships with its customers by delivering market-leading, integrated managed services. We are seeking a security consultant to deliver high-quality security services to meet the needs of our customers and to contribute to the continued development of our market-leading portfolio designed to meet the growing and diverse needs of our customers.