General Description
\n\nThe IT Cybersecurity Consultant Level 3 performs activities to identify, reduce, mitigate, and document cybersecurity risks. The role helps protect critical information infrastructure and supports compliance with applicable cybersecurity regulations, industry standards, and organizational policies. The consultant also provides specialized expertise in Identity and Access Management (IAM), Identity Governance and Administration (IGA), and IAM modernization initiatives.
\n\nExperience and Role Accountabilities
\n\nA minimum of seven (7) years of experience in Information Technology, including at least five (5) years in cybersecurity or an equivalent combination of relevant experience.
\n\t\n\tIdentify potential cybersecurity risks and incidents through vulnerability assessments, security log monitoring, external threat monitoring, and collaboration with internal teams and stakeholders.
\n\t\n\tAnalyze security test results, assess the potential impact of identified risks, validate baseline security configurations, and recommend remediation measures for operating systems, applications, networks, and telecommunications infrastructure.
\n\t\n\tSupport incident response activities involving security breaches, outages, errors, or unexpected system behavior by preparing incident reports, maintaining security operations documentation, and collaborating with incident response teams and subject matter experts.
\n\t\n\tSupport business groups in defining cybersecurity requirements, security architecture, testing, implementation, and operational transition of new security systems and technologies.
\n\t\n\tProvide cybersecurity guidance for IT projects by conducting compliance impact assessments and collaborating with project managers to promote security best practices and adherence to applicable regulations and policies.
\n\t\n\tDevelop, maintain, and improve security standards, guidelines, threat detection analytics, and security controls by reviewing event data, monitoring capabilities, and other relevant information sources.
\n\t\n\tCollaborate with cybersecurity, compliance, risk management, safety, emergency management, service providers, and technical teams to support compliance sustainment activities, prepare detailed reports, and maintain audit evidence and supporting documentation.
\n\t\n\tLead or support IAM and IGA modernization initiatives, including strategy development, requirements gathering, vendor evaluations, solution assessments, and platform selection.
\n\t\n\tDevelop and support IAM architectures, governance frameworks, policies, standards, and operating models aligned with business requirements and security objectives.
\n\t\n\tSupport identity lifecycle management processes, including joiner, mover, and leaver workflows, access requests and approvals, provisioning and deprovisioning, role management, access certification, and segregation of duties.
\n\t\n\tEvaluate and support the implementation and integration of IAM, IGA, and Privileged Access Management (PAM) solutions across complex enterprise environments.
\n\t\n\tSupport hybrid and cloud identity architectures, including Active Directory, Microsoft Entra ID, and cloud identity integration patterns.
\n\t\n\tPromote Zero Trust, least privilege, and identity-centric security principles across enterprise systems and applications.
\n\t\n\tCollaborate with business stakeholders, technical teams, auditors, and compliance professionals to translate business requirements into effective IAM capabilities and governance controls.
\n\t\n\tSupport regulatory compliance, audit readiness, access governance, and continuous improvement initiatives related to identity and cybersecurity controls.
\n\t\nEducation and Skills
\n\nEducation and Certifications
\n\nBachelor’s degree or technical diploma in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience.
\n\t\n\tA relevant professional certification is considered an asset, such as:
\n\n\tCertified Information Systems Security Professional (CISSP)
\n\t\t\n\t\tCertified in Risk and Information Systems Control (CRISC)
\n\t\t\n\t\tCertified Information Systems Auditor (CISA)
\n\t\t\n\t\tCertified Information Security Manager (CISM)
\n\t\t\n\t\tGIAC Certified Incident Handler (GCIH)
\n\t\t\n\t\tGIAC Certified Penetration Tester (GPEN)
\n\t\t\n\tIT Processes and Security Fundamentals
\n\nInternet policy enforcement and network architecture.
\n\t\n\tActive Directory and identity management.
\n\t\n\tSecurity logging and log management.
\n\t\n\tVulnerability scanning and penetration testing.
\n\t\n\tSecurity auditing and configuration management.
\n\t\n\tIT asset management and continuous monitoring.
\n\t\n\tWeb content filtering.
\n\t\n\tEncryption and strong authentication.
\n\t\n\tSecurity risk assessment, remediation, and incident response.
\n\t\nSecurity Technologies
\n\nNetwork, host-based, and wireless intrusion detection and prevention systems.
\n\t\n\tWireless Intrusion Detection and Prevention Systems (WIDS/WIPS).
\n\t\n\tSecurity Information and Event Management (SIEM).
\n\t\n\tVirtual Private Networks (VPN).
\n\t\n\tNext-Generation Firewalls (NGFW) and Web Application Firewalls (WAF).
\n\t\n\tDatabase Activity Monitoring (DAM).
\n\t\n\tPublic Key Infrastructure (PKI).
\n\t\n\tData Loss Prevention (DLP).
\n\t\n\tIdentity and Access Management (IAM) solutions.
\n\t\n\tIdentity Governance and Administration (IGA) platforms.
\n\t\n\tPrivileged Access Management (PAM) solutions.
\n\t\n\tCloud identity and access management technologies.
\n\t\nIAM and IGA Expertise
\n\nEnterprise IAM strategy, architecture, and modernization.
\n\t\n\tIdentity lifecycle management, access provisioning, and deprovisioning.
\n\t\n\tAccess requests, approvals, role-based access control, and access certification.
\n\t\n\tSegregation of duties and identity governance controls.
\n\t\n\tIAM policies, standards, governance frameworks, and operating models.
\n\t\n\tHybrid identity architecture and cloud identity integration.
\n\t\n\tZero Trust, least privilege, and identity-centric security.
\n\t\n\tIAM/IGA/PAM solution evaluation, implementation, and integration.
\n\t\n\tBusiness analysis, requirements gathering, vendor assessment, and stakeholder engagement.
\n\t\n\tAccess governance, audit support, regulatory compliance, and risk management.
\n\t\nIndustry Standards and Frameworks
\n\nISO/IEC 27001 and ISO/IEC 27002.
\n\t\n\tNational Institute of Standards and Technology (NIST) frameworks and guidance.
\n\t\n\tApplicable privacy and information protection legislation.
\n\t\n\tNorth American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), where applicable.
\n\t\n\tControl Objectives for Information and Related Technologies (COBIT).
\n\t\nAdditional Requirements
\n\nAbility to obtain the required security clearance for a security-sensitive position.
\n\t\n\tExcellent written and verbal communication skills in a professional environment.
\n\t\n\tStrong analytical, problem-solving, consulting, and stakeholder management skills.
\n\t\n\tAbility to translate complex business and technical requirements into practical security and IAM solutions.
\n\t\n\tAbility to work effectively with cross-functional teams in large, complex enterprise environments.
\n\t\nWork Assignment Requirements: IAM Advisor – IGA / IAM Modernization
\n\nSeven (7) or more years of enterprise IAM experience, with a strong focus on Identity Governance and Administration (IGA).
\n\t\n\tExperience leading or supporting IGA strategy, vendor evaluations, requirements gathering, and platform selection initiatives.
\n\t\n\tStrong understanding of identity lifecycle management, including joiner, mover, and leaver processes, access requests, approvals, provisioning, role management, access certification, and segregation of duties.
\n\t\n\tExperience developing IAM architectures, standards, governance frameworks, policies, and operating models.
\n\t\n\tKnowledge of hybrid identity architectures, Active Directory, Microsoft Entra ID, and cloud identity integration patterns.
\n\t\n\tUnderstanding of Zero Trust, least privilege, and identity-centric security principles.
\n\t\n\tExperience implementing or integrating IAM, IGA, and PAM solutions within large, complex organizations.
\n\t\n\tStrong stakeholder engagement, business analysis, and consulting skills, including the ability to translate business requirements into IAM capabilities.
\n\t\n\tExperience supporting regulatory compliance, audit, risk management, and access governance initiatives.
\n\t\nPreferred Qualifications
\n\nExperience with CyberArk, SailPoint, Saviynt, Microsoft Entra ID Governance, or comparable IAM/IGA/PAM platforms.
\n\t\n\tExperience supporting IAM modernization, identity transformation, or cloud adoption programs.
\n\t\n\tExperience integrating identity governance capabilities with enterprise directories, applications, and cloud services.
\n\t\n\tFamiliarity with enterprise security frameworks and identity-related compliance requirements.
\n\t\nIdeal Candidate
\n\nA senior IAM professional with deep expertise in Identity Governance and Administration, identity lifecycle management, governance controls, IAM architecture, and modern cloud identity platforms. The ideal candidate can support IAM modernization initiatives from strategy, requirements gathering, and solution design through implementation, integration, governance, and organizational adoption. They bring strong consulting and stakeholder engagement skills, along with the ability to align identity solutions with enterprise security objectives, operational needs, and regulatory requirements.
\nNote: this is an opportunity with a Microserve client.","id":6086,"title":"IT Cyber Security Consultant -L3 "}]}