IT Security Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
IT Security Consultant advising Evonik, a global specialty chemicals company, on information security, risk management, and M&A security assessments. Home-office role in Brazil.
Responsibilities:
- Consult on current trends in the methodological and technical assessment of IT security requirements
- Analyze the IT security threat landscape and review regulatory requirements and methodologies related to information security
- Monitor IT security levels, assess threat potentials and residual risks, and develop recommendations for action
- Introduce, implement, and continuously develop methodologies for ensuring IT security requirements
- Participate in developing new IT security solutions and conduct security assessments of new or existing solutions
- Advise and support IT product groups and Evonik units on information security
- Guide and consult IT projects on information security matters
- Exchange knowledge with Product Owners, Domain Architects, IP Protection, and OT Security stakeholders
- Support M&A due diligence by assessing sellers’ IT security levels and developing temporary protection measures
- Guide and consult IT M&A projects through information-security transition
- Contribute to IT group standards and participate actively in IT committees
Requirements:
- Successfully completed (technical) university degree in IT security, computer science, economics, engineering, or natural sciences, or comparable commercial/technical education in the IT field with relevant professional experience
- Several years of professional experience in information security
- Proven experience with concepts, protocols, strategies, and best practices in information security
- Experience conducting risk analyses, including business impact, vulnerability assessment, measure effectiveness, and risk-reduction strategies
- Strong understanding of the impact of IT security tools, technologies, and regulations on business processes
- Familiarity with information security management frameworks such as (ISO) 2700x or the NIST Cyber Security Framework
- Certification in IT security such as CISM, CRISC, ISO 27001 Lead Auditor, or CISSP
- Fluent English, written and spoken
- German is an advantage
- Ability and willingness to interact with Evonik personnel and build a network
- High level of initiative, assertiveness, cooperation skills, and team spirit
- Willingness to travel occasionally nationally and internationally
- Shift working is required
Benefits:
- Performance-based remuneration
- Occupational health benefits
- Hybrid and flexible working environments with #SmartWork
- Attractive career paths
- High-quality development programs
Similar Jobs
Information Security Expert
Information Security Expert strengthening CREALOGIX’s digital banking and financial technology security. Developing ISMS, managing audits, assessing risks, and advising technical and business stakeholders.
Information Security Officer
Information Security Officer leading Vektor Group’s BSI-based ISMS, ISO 27001 certification, and NIS-2 compliance. Securing AI platforms built for defence and government customers.
IT Security Architect – IAM, On-Premises
IT Security Architect defining IAM, Active Directory, Entra ID, and on-prem security standards. Advising technical teams at sports nutrition company The Quality Group.
IT Security Architect – IAM, On-Premises
IT-Security-Architekt für IAM, Active Directory und On-Prem-Infrastruktur bei Sporternährungsanbieter The Quality Group. Entwicklung von Sicherheitsstandards und Beratung technischer Teams.
Cybersecurity Consultant
Consultant cybersécurité chez Wavestone, cabinet international accompagnant les transformations stratégiques. Intervention sur gouvernance, cloud, audits, risques et sécurité des systèmes.
Founding Information Security Lead
Founding Information Security Lead owning security, compliance, and IT operations for Flodesk’s email marketing platform. Building SOC 2, ISO 27001, and CCPA readiness.
Cybersecurity Architect
Cybersecurity Architect leading RMF, risk mitigation, and ATO efforts for DoD Zero Trust systems. GDIT delivers technology and mission services to U.S. government, defense, and intelligence agencies.
Senior Security Agent / AI Red Team Engineer
AI red-team engineer attacking PGTEK agents and converting findings into durable controls. Supporting secure Federal and DoD systems through threat modeling, remediation, and authorization activities.
Software Security Lead
Software Security Lead securing Cisco’s enterprise IT and Operations platforms across applications, cloud, identity, data, and AI. Leading threat modeling, architecture reviews, risk remediation, and security metrics.
Staff Security Researcher
Staff Security Researcher conducting vulnerability research and penetration testing for GitLab’s AI-powered DevSecOps platform. Developing attack methodologies, tooling, and security improvements.
Software Security Lead
Cisco software security lead securing AI-enabled enterprise platforms and applications. Leading threat modeling, architecture reviews, risk remediation, and portfolio security metrics.
Principal Security Researcher
Principal Security Researcher securing GitLab’s AI-powered DevSecOps platform. Leading vulnerability research, AI attack analysis, penetration testing, and remediation across GitLab’s codebase.
Application Security Remediation Engineer
Application Security Remediation Engineer remediating Wiz findings across enterprise applications for Arctiq’s technology services clients. Securing code, dependencies, containers, and DevSecOps delivery pipelines.
Senior Engineer, Information Security Architect
Information Security Architect engineering secure platforms and enterprise designs for Lovesac, a fast-growing adaptable furniture company. Leading Zero Trust architecture, security tooling, integrations, and governance.
Senior Security Engineer – Identity and Access Management
Senior IAM Security Engineer designing automated identity controls for Providence, a comprehensive healthcare organization. Modernizing hybrid identity infrastructure toward Zero Trust and cloud security.
Cybersecurity Engineer
Cybersecurity Engineer managing endpoint, identity, cloud, and enterprise security for Accela’s cloud-based government software platform. Supporting vulnerability management, compliance controls, investigations, and security automation.
Cyber Security Engineer
Cyber Security Engineer securing Emprise Bank through vulnerability management, identity access, DLP, vendor reviews, and incident response. Providing tier 3 security support and leading IT Security projects.
VP of IT and Cybersecurity
VP leading IT and cybersecurity strategy, reliability, and risk for Tidal Financial Group’s ETF investment technology platform. Advising executives and managing teams, vendors, incidents, and compliance.
IT Security Specialist
IT Security Specialist protecting Fika’s rural infrastructure nonprofit systems from cyber threats. Securing networks, cloud environments, endpoints, and compliance operations across global program offices.
Senior Digital Forensics and Incident Response Engineer
Senior DFIR Engineer leading identity-theft investigations and automation for Humana, a U.S. healthcare and insurance company. Supporting enterprise cyber investigations, incident response, and forensic capability development.