Cybersecurity Advisory Consultant

Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit https://www.bitdefender.com

We are seeking a driven and passionate Cybersecurity Advisory Consultant to join Bitdefender's Cyber Operations (Cybersecurity Advisory Services) team, collaborating directly with our clients to conduct security advisory assessments.

The Consultant will be responsible for coordinating and supporting cybersecurity advisory engagements within Bitdefender worldwide. They will work with a team of skilled professionals dedicated to supporting our clients manage risk in their security posture. They will play a critical role in delivering high-quality services to clients and contributing to the growth of the service and reputation of the company. Members of the Cybersecurity Advisory team are generally familiar with most aspects of cybersecurity but specialize in defining cybersecurity strategies, assessing organizations against industry-recognized frameworks (such as MAS TRM, ISO 27001 and NIST CSF).

The role will be expected to support and work in close partnership with the Sales and Delivery Management team to ensure a smooth process end-to-end for our customers. They will facilitate pre-sales support and ensure the delivery of exceptional value to our clients, constantly exploring routes to improve services and positioning Bitdefender as a leader in the security landscape.

Key Responsibilities:

• Engagement Management: Lead the planning, execution, and reporting of all relevant engagements, ensuring objectives are met within scope, budget, and timeline constraints.

• Technical Expertise: Demonstrate advanced knowledge and proficiency in various frameworks, methodologies and technologies. Typical projects could include:

• Defining or reviewing a cybersecurity strategy;

• Creating or reviewing an ISMS/Policy documentation;

• Compliance or gap analysis services against industry recognized frame;

• Cloud security assessment (e.g. AWS, GCP, Azure, AliCloud);

• Acting as a Virtual CISO/ISM for our customers to provide strategy guidance/support;

• Defining a Security Target Operating Model;

• Performing a risk assessment on an organization or specific asset;

• Assessing a third-party supplier for our customers;

• Conducting training and awareness exercises for our customers (board level or general employee awareness training);

• Conducting incident response tabletop exercises.

• Client Interaction: Interface directly with clients to understand their security objectives, communicate findings, and provide actionable recommendations for improvement.

• Sales Support: Interface directly with Sales to support on client scoping to understand their security objectives and tailor an impactful and valuable solution.

• Team Development: Mentor and develop team members, supporting their growth and skill enhancement in the field of offensive security.

• Continuous Improvement: Stay abreast of emerging threats, vulnerabilities, and industry best practices, integrating new techniques and tools into our services/solutions.

• Collaboration: Collaborate with other teams within the company, such as Sales, Delivery Management, and Research, to ensure alignment and maximize client value across our portfolio of services.

• Quality Assurance: Maintain high standards of quality and professionalism in all deliverables across the team, adhering to the company's methodologies and standards.

• Travel: Willing to travel around and within South-east Asia and enjoy being out of their comfort zone.

Requirements:

• Experience: Minimum of 2 years of experience in cybersecurity and driven/eager to learn.

• Education (one or more of the following):

• Bachelor’s degree in computer science, information security or any related field;

• CISSP, CISM, ISO 27001 LA/LI, CISA, CRISC, CCSP, CCSK, CCISO, CGRC, CIRH, CEH, etc.

• Communication: Strong communication in English and Romanian. This includes writing and interpersonal skills to collaborate with external and internal stakeholders. Other languages such as German, French, Italian, Spanish, etc. would be favorable.

• Technical Proficiency: Deep understanding of security frameworks (ISO27001, NIST CSF, NIST 800-53, PCI DSS, GDPR, PDPA, etc.), techniques and some technology vendors such as ServiceNow, OneTrust, etc.

• Client Focus: Strong client-facing skills, with the ability to build and maintain relationships, understand client needs, and deliver impactful solutions in a clear manner.

• Analytical Thinking: Strong analytical and problem-solving skills, with the ability to think creatively and work independently with minimal supervision.

• Team Player: Collaborative mindset, with the ability to work effectively in cross- functional teams and contribute to a positive work environment, whilst training and mentoring others in a leadership capacity.

• Ethical Standard: Commitment and dedication to uphold client confidentiality and integrity in all engagements.

• Adaptability: Ability to thrive in a fast-paced, dynamic environment, with a willingness to adapt to changing priorities and challenges.

• Passion: Demonstrated passion for cybersecurity, evidenced by involvement in security initiatives outside of work, such as public disclosure of vulnerabilities or mentoring programs, etc.

Why Bitdefender:

• We value technical competency (and development) in our consultants and the quality of work we deliver to our clients.

• There is an annual training budget allocated for each consultant to take up cybersecurity-related courses/certifications.

• Dedicated research time to ensure you stay at the top of your game for the next client project.

• We have an awesome delivery team that will help minimize distractions and allow you, our consultant, to focus your efforts on the assessment.

• Work with and learn from fellow similar-minded colleagues from Singapore, Indonesia, Europe, the United States, with our HQ in Romania.

#LI-LG1