Cybersecurity Consultant

About the role

As a Cybersecurity Consultant in Sia’s Cybersecurity Business Unit, you will work under senior consultants on consulting, implementation and audit projects. You will contribute to a wide range of services including strategy, risk, compliance, operations and resilience for clients across sectors.

Key responsibilities

• Develop and deliver cyber‑strategy services such as board advisory, target operating model, M&A due diligence, transformation and maturity assessments.
• Conduct cyber‑risk management activities including risk assessment, quantification, third‑party risk, insider risk and risk analytics.
• Lead compliance projects covering standards and regulations such as ISO 27001/27701, NIST, GDPR, PCI DSS, SWIFT CSP and others.
• Design and implement security architectures for cloud, OT/ICS, IoT, endpoint protection, data protection and secure development pipelines.
• Perform cyber‑resilience operations including threat hunting, digital forensics, incident response, vulnerability management, penetration testing and red‑team exercises.
• Participate in internal innovation through the Sia CyberLab, creating SaaS offerings, benchmarking solutions and contributing to thought‑leadership content.

Required profile

• Master's degree in engineering, computer science, statistics, econometrics or a related field.
• 1–3 years of professional experience in cybersecurity consulting, implementation or audit.
• Ability to work in a team under supervision and choose areas of expertise.

Required skills

• Cybersecurity strategy and governance frameworks.
• Risk assessment, quantification and treatment methodologies.
• Compliance standards: ISO 27001, ISO 27701, ISO 223xx, NIST, GDPR, PCI DSS, SWIFT CSP, etc.
• Cloud security and security architecture design.
• OT/ICS, IoT and IIoT security concepts.
• Secure SDLC, DevSecOps, SSDLC.
• Penetration testing, red‑team operations, vulnerability and patch management.
• Threat hunting, digital forensics and incident response.
• Cryptography and encryption techniques.