Information Security Consultant

Quick Facts

• Role: Information/cybersecurity consultant focused on security management systems and security controls
• Focus: ISO 27001 and regulatory frameworks such as nZoKB/NIS2, TISAX (also DORA)

Description

Help organizations implement and develop information and cyber security management systems. Perform gap and risk analyses, internal audits, and assessments of cyber security maturity, then propose security measures and contribute to security architecture and documentation. Work with clients on implementing organizational, process, and technical security controls, and support delivery through consulting, presentations, and workshops.

Responsibilities

• Support implementation and development of information/cybersecurity management systems
• Prepare clients for regulatory requirements (ISO 27001, TISAX, nZoKB/NIS2, DORA and others)
• Conduct GAP analyses, risk analyses, internal audits, and cyber security maturity assessments
• Design and propose security controls; contribute to security architecture
• Assist clients with implementing organizational, process, and technical security measures
• Participate in roles such as cyber security manager, security consultant, or internal auditor
• Prepare expert presentations, workshops, and training for clients

Requirements

• Minimum 3 years of practical experience in cyber or information security
• Practical experience with implementing or auditing ISO 27001, nZoKB/NIS2, TISAX, or similar frameworks
• Ability to perform risk analysis, gap analysis, and propose suitable security measures
• Experience creating security documentation such as policies, directives, and processes
• Knowledge of security architecture and technical security controls
• Orientation in IAM and access management, asset management, network security, logging, monitoring, and incident management
• Ability to independently communicate with clients and take responsibility for parts of projects
• Very good communication and presentation skills
• Independent, analytical, and responsible working style
• Very good Czech and good English
• Proficiency in MS Office (Word, Excel, PowerPoint)

Benefits

• Independent expert position in an established Czech cybersecurity-focused company
• Projects for major clients from commercial and public sectors
• Opportunity to work on ISO 27001, TISAX, NIS2, DORA, and security architecture topics
• Large room for professional development and acquiring certifications
• Friendly team of experienced consultants and architects
• Flexible work environment and reasonable autonomy
• Motivating compensation
• English language training
• Career growth toward senior consulting or architect roles
• Possibility of part-time employment for parents on parental leave (with relevant expertise)