Security Risk Consultant

About the role

Capco is seeking a Security Risk Consultant to help clients identify, assess and manage cybersecurity threats and technology risks across complex environments, particularly within financial services.

Key responsibilities

• Assess existing security controls and evaluate their effectiveness against cyber and technology risks.
• Identify threats, vulnerabilities, control gaps and document findings with remediation recommendations.
• Conduct regular data, threat and risk assessments and recommend corrective actions.
• Collaborate with security, architecture, engineering, risk and business stakeholders to embed assessments throughout technology change.
• Perform threat and risk assessments across infrastructure, cloud environments, platforms and services.
• Produce clear risk assessment reports supporting governance, remediation planning and decision‑making.

Required profile

• Strong experience in cybersecurity risk assessment, threat assessment, technology risk or information security.
• Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies and remediation planning.
• Experience assessing applications, infrastructure, cloud services or technology solutions against security requirements.
• Understanding of cybersecurity frameworks, governance, regulatory requirements and security‑by‑design principles.
• Excellent communication and stakeholder management skills to translate technical threats into business risks.

What we offer

• Opportunity to work on complex cybersecurity challenges for Tier 1 financial institutions.
• Collaborative, flat and entrepreneurial consulting culture.
• Access to continuous learning, training and industry certifications.
• Be part of a team shaping the future of digital financial services and energy transformation.