INTECH Automation Intelligence is seeking a skilled Cybersecurity Consultant with expertise in Governance, Risk, and Compliance (GRC), Vulnerability Management, and Incident Management to join our IT Cybersecurity Product Team. This role is essential in delivering and implementing cybersecurity solutions that protect critical industrial infrastructure across sectors such as Oil & Gas, Petrochemicals, Utilities, and Manufacturing. The successful candidate will collaborate closely with portfolio managers, product managers, developers, and security engineers to embed security throughout the project lifecycle, from design and development to testing. Additionally, the consultant will provide GRC application consulting, streamline compliance workflows, and enhance the overall security posture of our products.
Key Responsibilities
- Design, implement, and maintain security risk management frameworks aligned with ISO 27001, NIST, ISA 62443, and other relevant industry standards.
- Lead GRC automation initiatives to optimize security risk, audit, and compliance processes within the product lifecycle.
- Collaborate with internal and external stakeholders to ensure product security controls meet industry and regulatory requirements.
- Develop policies, procedures, and security documentation to support compliance with global security standards.
- Conduct security assessments and develop strategic roadmaps for clients and product-related work.
- Provide security guidance throughout the product lifecycle, from requirements gathering through deployment.
- Work with development teams to enforce secure software development lifecycle (SDLC) practices.
- Manage automated vulnerability scanning and manual penetration testing for applications and infrastructure.
- Define risk-based security testing strategies to proactively identify vulnerabilities before product release.
- Lead incident response planning and threat modeling exercises for new and existing products.
- Implement and manage GRC platforms such as Archer, OneTrust, LogicGate, and ServiceNow GRC to monitor risks, compliance gaps, and audit workflows.
- Configure and utilize security testing tools including Nessus, Qualys, Burp Suite, and OWASP ZAP.
- Develop custom security dashboards and reporting tools to provide real-time visibility into vulnerabilities and compliance status.
- Automate compliance and risk reporting to support audits, certifications, and regulatory assessments.
- Partner with product managers to integrate security requirements into product roadmaps.
- Deliver security awareness training for developers and DevOps teams.
- Define secure coding practices and conduct code reviews to identify security flaws.
- Perform security architecture reviews for new product features and integrations.
- Assist teams in responding to security incidents, customer security assessments, and compliance requests.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- 1 to 4 years of professional experience in cybersecurity roles.
- Strong knowledge of security frameworks such as ISO 27001, NIST, and CIS.
- Proficiency with tools including Nessus, Burp Suite, Metasploit, Wireshark, Splunk, and QRadar.
- Experience with SIEM, IDS/IPS, endpoint security, and firewalls.
- Solid understanding of networking protocols, operating systems (Linux, Windows), and cloud platforms (AWS, Azure, GCP).
- Familiarity with GRC frameworks including ISO 27001, NIST 800-53, NIST CSF, SOC 2, and ISA 62443.
- Experience implementing and managing GRC platforms such as Archer, OneTrust, ServiceNow GRC, or LogicGate.
- Expertise in vulnerability management tools like Tenable Nessus, Qualys, Rapid7, or OpenVAS.
- Knowledge of application security testing methodologies (SAST, DAST, SCA).
- Hands-on experience with security automation.
- Strong documentation, policy-writing, problem-solving, and analytical skills.
- Excellent written and verbal communication abilities.
- Attention to detail and ability to work independently or collaboratively.
- Capability to manage multiple priorities in a fast-paced environment.
Preferred Qualifications and Benefits
Relevant certifications such as CEH, OSCP, CISSP, CISM, CISA, or CompTIA Security+ are advantageous.
INTECH offers global exposure through international projects and collaboration with worldwide teams. We provide a competitive compensation package, including an annual performance bonus. Employees benefit from in-house lunch services, comprehensive health insurance covering outpatient and inpatient care for employees and their families, and access to continuous learning through training programs and certifications. We support work-life balance with paid time off and holidays, and foster an inclusive, diverse workplace culture.
Joining INTECH means becoming part of a globally recognized industrial automation and digitalization technology leader with nearly 30 years of experience partnering with major oil and gas companies. You will work on transformative Industry 4.0 technologies that address real-world challenges. Our hiring process is designed to be fair and inclusive, ensuring a smooth journey from application to onboarding.
INTECH Automation Intelligence is proud to be an Equal Opportunity Employer committed to diversity and inclusion.