Cyber Security Advisor

About the role

A proactive, business-minded Security Advisor is sought to join the cybersecurity team. The role embeds security by design, giving strategic and tactical guidance to projects and business units so that secure digital transformation aligns with enterprise objectives. It bridges technical security and business enablement, managing risk without hindering innovation.

Key responsibilities

• Advise project and product teams on security best practices during design, build and deployment, embedding security early and consistently.
• Act as a trusted advisor to the business, offering pragmatic security solutions that enable rather than block innovation.
• Review and assess new and ongoing technology initiatives so that security requirements are met, risks understood and mitigations in place.
• Support project delivery teams in complying with internal security policies, industry standards and regulatory obligations.
• Contribute to security design principles, blueprints and reusable patterns.
• Lead and take part in threat modeling, architecture reviews and risk assessments.
• Liaise between security, IT and business stakeholders to keep security strategy aligned with business objectives.
• Champion a shift-left security approach and promote a culture of secure innovation.
• Contribute to the security governance framework, including policies, guidelines and controls.
• Stay informed on evolving risks, business trends and emerging technologies and assess their impact.

Required profile

• Bachelor's or Master's degree in Information Security, Computer Science, Information Technology or a related field.
• At least 5 years of experience in information security, with strong experience in security advisory, secure project delivery or security architecture consulting.
• Experience in enterprise or complex environments, especially in a consultative capacity with IT, business and risk stakeholders.
• Fluent English; French is a plus.

Required skills

• Knowledge of information security principles, frameworks and standards such as ISO 27001, NIST CSF, OWASP and secure SDLC.
• Ability to align security decisions with business objectives, risk appetite and regulatory compliance.
• Experience supporting cloud, application and infrastructure projects from a security perspective.
• Experience in threat modeling, data classification and security architecture reviews.
• Certifications such as CISSP, CISM, SABSA, TOGAF (security focus), CCSP or equivalent are a plus.