Cybersecurity Consultant (Risk & Architecture)

About the role

Malomatia is looking for a Cybersecurity Consultant to support corporate security initiatives across risk, architecture, data protection, and resilience. The role bridges technical teams, business stakeholders, and governance functions, operating in a fast‑changing environment.

Key responsibilities

• Perform risk assessments on IT systems, cloud platforms, applications, and third‑party services, and maintain the risk register.
• Assist in designing and reviewing secure architectures for on‑premise and cloud environments, including IAM, network segmentation, and security controls.
• Support data security and privacy measures such as classification, encryption, and lifecycle management to meet regulatory requirements.
• Participate in disaster recovery planning, testing, and continuous improvement of recovery capabilities.
• Collaborate with security operations and incident response teams to integrate incident scenarios into crisis management.
• Provide GRC support aligned with frameworks like ISO 27001, NIST, ISO 22301, and assist in audits and evidence collection.
• Evaluate third‑party security risks, conduct due‑diligence, and track remediation actions.
• Drive continuous improvement by incorporating lessons learned, regulatory updates, and evolving business needs.

Required profile

• Bachelor’s degree in Information Security, IT, or a related field (or equivalent experience).
• 2‑3 years of experience in cybersecurity consulting or audit.
• Strong command of English.
• Relevant certifications such as ISO/IEC 27001 or ISO/IEC 22301.

Required skills

• Risk assessment methodology
• Security architecture design
• Identity & Access Management (IAM)
• Network segmentation
• Data encryption and classification
• Cloud security concepts
• Disaster recovery planning
• Incident response coordination
• GRC frameworks (ISO 27001, NIST, ISO 22301)