Job description

Our Client is looking for a highly skilled Cybersecurity Threat Intelligence Consultant to develop a comprehensive and repeatable threat intelligence process framework for consistent deployment across our organization. This role requires a strategic thinker with a strong background in cybersecurity and threat intelligence, capable of ensuring compliance with ISO27001:2022 requirements and industry best practices.

Projektbeschreibung

Develop a comprehensive and repeatable threat intelligence process framework for consistent deployment across our organization
Design and develop each process lifecycle stage, including governance (direction), collection, processing, analysis, dissemination, and feedback
Create artefacts (e.g., procedures, instructions) to guide users through these stages
Define interfaces with relevant functions such as security operations, risk management, incident management, and vulnerability management.
Develop key performance indicators (KPIs) to measure program effectiveness and establish feedback mechanisms for continuous improvement.
Develop overarching categories of threats in a sustainable manner, so that each threat source (e.g. risks, vulnerabilities) can be assigned to those
Design a strategic threat intelligence report template that provides contextual, actionable insights to key decision-makers and document the report generation process for repeatability
Ensure scalability and adaptability to meet the needs of various divisions and stakeholders
Ensure compliance with ISO27001:2022 requirements and industry best practices.

Skills

Proven experience in developing and implementing cybersecurity threat intelligence programs
Experience in designing strategic threat intelligence reports
Strong understanding of ISO27001:2022 requirements and industry best practices
Excellent analytical and problem-solving skills
Ability to create governance documents, detailed procedures and instructions
Strong communication skills with the ability to prepare and present high-level slides to stakeholders
Knowledge and experience in other domains of cybersecurity such as security operations, risk management, incident management, and vulnerability management functions

Required profile