Data Security Consultant

About the role

The Data Security Consultant assesses data‑security risks and supports the design, implementation and validation of security controls for client data, platforms, integrations and analytics solutions. Working alongside security leadership, architects, engineers and compliance specialists, the consultant translates security, privacy and classification requirements into practical technical and operational measures and delivers clear requirements, evidence and remediation guidance.

Key responsibilities

• Assess data‑security risks, threat exposure, control design, configurations and operational evidence.
• Translate security, privacy and classification requirements into technical and procedural control specifications.
• Review identity, authentication, authorisation, role design, privileged access and segregation of duties.
• Assess encryption, key management, secrets handling, secure transfer and data‑masking requirements.
• Review security for APIs, integrations, pipelines, storage, analytics platforms and shared datasets.
• Evaluate logging, monitoring, alerting, vulnerability management and incident‑response arrangements.
• Support security testing, evidence collection, defect triage and remediation validation.
• Develop risk records, control matrices, implementation actions, exceptions and residual‑risk summaries.
• Coordinate security requirements with architecture, engineering, platform, privacy, audit and operations teams.
• Prepare security guidance, configuration standards, test evidence and operational handover material.
• Deliver security walkthroughs and role‑based knowledge transfer to client teams.

Required profile

• Bachelor's degree in cybersecurity, computer science, information systems or a related field (or equivalent experience).
• 4‑8 years of experience in information security, security engineering or technology risk.
• Proven experience assessing or implementing controls for data platforms, cloud services, APIs or enterprise systems.
• Hands‑on experience with identity management, encryption, logging, vulnerability management and incident response.
• Strong ability to document findings and communicate remediation priorities to technical and business stakeholders.

Required skills

• Identity & Access Management
• Encryption & Key Management
• Secure Data Transfer
• Data Masking
• API & Integration Security
• Logging & Monitoring
• Vulnerability Management
• Incident Response
• Security Testing & Evidence Collection