Consultant - Information Security
About the role
The Consultant - Information Security at WNS will be responsible for contributing to information security risk assessment processes, conducting risk and impact assessments, supporting compliance certification and client audit activities, and assisting with adherence to information security and privacy regulations. The role involves supporting business and risk management leaders on security matters, handling security incidents and data breach investigations, maintaining risk assessment trackers, and supporting third-party risk management activities. The consultant will also help drive security awareness initiatives and review contractual and privacy agreements. The position requires a bachelor's degree in information technology, computer science, or a related field, and 5-7 years of experience in Information Security. A good understanding of IT and Information Security concepts and frameworks such as NIST and ISO 27001 is highly desirable. Strong organizational, communication, and interpersonal skills are essential. WNS, part of Capgemini, is a global leader in intelligent operations and transformation, serving clients across multiple industries.
Must have
- Bachelor’s degree in information technology or computer science, or a related field.
- Minimum 5-7 years of experience in Information Security.
- Good understanding of IT and Information Security concepts, terminology, and common frameworks (e.g., NIST, ISO 27001) is highly desirable.
- Excellent organizational and time management skills with strong attention to detail.
- Exceptional written and verbal communication skills, capable of summarizing complex information clearly and concisely.
- Strong interpersonal skills to effectively collaborate with various internal teams and stakeholders.
- Ability to handle multiple tasks concurrently and prioritize effectively in a dynamic environment.
Nice to have
- CISA, CISM, CISSP certifications (Preferred).
Technologies
- CISM
- CISSP
- ISO 27001
- NIST
Highlights
Certifications such as CISA, CISM, or CISSP are preferred but not mandatory. Experience with privacy regulations like HIPAA, HITECH, GDPR, POPIA, and PIPEDA is mentioned. The company operates globally with multiple headquarters and delivery centers.