Senior Cyber Security Advisor

Client of High Street Resources

Act as the primary security advisor for multiple clients, providing strategic guidance and oversight on all aspects of their cybersecurity programs.

Develop and implement security strategies, policies, and procedures for varying client environments.

Conduct technical risk assessments and develop risk management plans to address identified vulnerabilities and threats within complex environments.

Design and advise on the implementation of secure architectures and solutions tailored to client needs.

Build and maintain strong relationships with clients, understanding their unique security challenges and providing tailored solutions.

Internally assess, evaluate, and make recommendations to management regarding the adequacy of the security controls for customer security programs.

Researching and keeping up to date with industry compliance regulations, most specifically within the investment and financial services space, including SEC, FCA, and DORA.

Serving as a senior technical resource compliance information security gap assessment for various regulations and frameworks.

Serving as the designed Cloud Officer for vCISO clients with a requirement under CCSF.

Occasional travel within the UK and EU to industry-specific conferences or major client meetings (less than 10% travel).

Skills:

Proven expertise on the administration, security, and configuration of Microsoft Azure and/or AWS.

Proven expertise in the realm of identity and access management (IAM) leveraging solutions such as Privileged Identity Management (PIM) and conditional access policies.

Experience working with cloud automation to include infrastructure as code and compliance as code.

Comfortable supporting sales teams in a client facing capacity to outline Company s Cybersecurity advisory services as a subject matter expert.

Strong attention to detail and well organized.

Excellent verbal communication and written communication skills, especially when communicating complex concepts to non-technical audiences.

Highly motivated to continuously learn and grow to remain on the bleeding edge of cybersecurity best practices from both a technological and regulatory perspective.