Information Security Consultant

About the role

The Information Security Consultant will lead and enhance the organisation's Third‑Party Risk Management (TPRM) programme. You will conduct security due‑diligence, vendor risk assessments and continuous monitoring to ensure third‑party engagements meet banking security standards and regulatory requirements.

Key responsibilities

• Design, implement and maintain an enterprise Privacy Governance Framework, including policies, standards, DPIAs, PIAs and Records of Processing Activities.
• Assess and monitor third‑party privacy compliance, data‑sharing arrangements and support Privacy‑by‑Design initiatives.
• Support the implementation and ongoing compliance with ISO 27701 and ISO 27001, embedding privacy controls across business and technology functions.
• Prepare privacy compliance reports, management dashboards and drive continuous improvement through automation and governance enhancements.
• Conduct privacy risk assessments, support regulatory audits and deliver privacy awareness and training sessions.

Required profile

• 5–8 years of Information Security or GRC experience, with at least 3 years dedicated to Third‑Party Risk Management.
• Banking or Financial Services background preferred.
• Bachelor’s degree in Computer Science, Information Security or a related discipline.

Required skills

• Hands‑on experience with GRC platforms such as ServiceNow GRC, RSA Archer, OneTrust or SAP GRC.
• Strong knowledge of privacy frameworks and standards (ISO 27701, ISO 27001).
• Expertise in conducting DPIAs, PIAs, privacy impact assessments and managing Records of Processing Activities.
• Proficiency in third‑party security assessments and risk management methodologies.