Consultant (Specialist)

About the Role

This role sits inside the Enterprise Security Architecture team at a major energy infrastructure organization, focused on providing holistic cybersecurity advisory services across the enterprise. The Cybersecurity Advisor works alongside IS and business partners to evaluate, design, and implement controls that keep digital and operational environments safe, resilient, and aligned with Zero Trust principles and established cybersecurity standards.

The ideal candidate brings 10 or more years of cybersecurity or related IT experience and is equally comfortable advising senior stakeholders and rolling up their sleeves with technical teams. They have a strong grasp of security architecture across hybrid and multi-cloud environments, a genuine passion for outcomes over process, and the interpersonal skills to become a trusted partner across a large, cross-functional organization.

Key Responsibilities

1. Provide technical and non-technical security consulting to operational and project teams, helping them reach business objectives through safe and compliant solutions
2. Evaluate, monitor, and manage the health of controls and barriers using the organization's Control Barrier Architecture and cybersecurity standards
3. Design and implement controls in partnership with stakeholders that maximize compliance while minimizing exceptions and preserving operational objectives
4. Ensure Zero Trust architectural consistency across identity, device posture, network segmentation, application access, and inspection controls, and translate those principles into actionable design patterns
5. Support Architecture working groups and educate portfolio and solution architects on Enterprise Security Standards and how to implement them correctly
6. Analyze risk and control placement to ensure cost-effective management of cyber risk across the enterprise and advise on cybersecurity solution requirements and implementation
7. Research emerging technology trends and maintain a current knowledge base that can influence future security capabilities
8. Support the strategy, direction, and documentation hierarchy for cybersecurity governance, risk, and compliance (GRC) across the organization

Required Skills & Experience

• Bachelor's degree in Engineering, Computer Science, Information Security, or a technical certification in a related discipline
• 10 or more years of cybersecurity or related IT analytical experience
• Native or bilingual English proficiency
• Proven ability to govern and approve complex solution designs across hybrid and multi-cloud environments
• Strong analytical, investigative, problem-solving, and written and verbal communication skills
• Demonstrated ability to work cross-functionally with stakeholders at multiple organizational levels

Preferred Skills

• Hands-on experience with security technologies across NGFW, VPN, IPS/IDS, vulnerability management, access management, SIEM, endpoint security, threat intelligence, GRC, penetration testing, and red and purple teaming
• Experience with SAP S/4HANA, particularly implementing or auditing SAP Identity and Access Management (IAM) including integrations with SAP and non-SAP security tooling
• Experience architecting security solutions in OT/ICS environments based on the Purdue model
• Familiarity with operational technology solutions such as HMI, PLC, and DCS
• Industry certifications such as CISSP, GCIP, GICSP, CSSA, CCSP, Azure or AWS security, TOGAF, or other recognized cybersecurity credentials
• Strong ability to influence senior stakeholders and guide technical teams through complex architectural decisions