At a glance
- Location
- Middle East - Doha
About the role
- Capco is seeking a Security Consultant to identify, assess, and manage cybersecurity threats and technology risks for clients.
- The role involves collaborating with cross-functional teams to deliver structured assessments that support informed decision-making and effective security controls.
- The position focuses on addressing complex cybersecurity challenges within the financial services sector.
Responsibilities
- Assess existing security controls and evaluate their effectiveness against cyber and technology risks.
- Identify potential threats, vulnerabilities, control gaps, and risk scenarios.
- Document findings and recommend proportionate remediation actions.
- Conduct regular data, threat, and risk assessments.
- Recommend corrective actions to improve security posture.
- Embed threat and risk assessment activities throughout technology change and delivery.
- Conduct assessments across infrastructure, cloud environments, technology platforms, and business services.
- Produce risk assessments, reports, and recommendations to support governance and remediation planning.
Requirements
- Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines.
- Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning.
- Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements.
- Strong understanding of cybersecurity frameworks, governance, risk management, regulatory requirements, and security-by-design principles.
- Clear communication and stakeholder management skills.
Preferred qualifications
- Experience delivering threat and risk assessments within banking, financial services, or another regulated environment.
- Knowledge of recognised cybersecurity and risk frameworks and industry security standards.
- Experience with threat modelling methodologies, security testing, vulnerability management, or cyber threat intelligence.
- Relevant cybersecurity, technology risk, cloud, or information security certifications.
- Exposure to large-scale cybersecurity, cloud, regulatory, or technology transformation programmes.
Benefits
- Competitive, people-first benefits package
- Continuous learning, training, and industry certifications
- Collaborative, flat, and entrepreneurial consulting culture
Skills
- Cybersecurity
- Threat Modelling
- Vulnerability Assessment
- Risk Assessment
- Governance
- Security-by-design
