Information Security & Resilience Consultant

Responsibilities

Due Diligence Assessments: Conduct comprehensive cybersecurity risk assessments and security due diligence on target acquisition companies.

Control Evaluation: Review target company security controls, policies, third-party assurance reports (e.g., SOC 2, ISO certifications), and historical security incident logs.

Identify deal-impacting risks, quantify remediation effort (cost/timeline ranges), and advise on onboarding security priorities.

Integration Roadmapping: Identify risk areas and formulate actionable post-acquisition security integration roadmaps and transition plans.

Framework Governance: Assess, maintain, and mature existing security frameworks aligned with ISO/IEC and SOC 2 Type II.

Develop and maintain information security policies, standards, and procedures aligned t...