Consultant Information Security & Cyber Resilience (m/f/d), Associate to Senior level

MeJuvante is expanding its cyber security consulting team for long-term work with a major player in the European financial infrastructure sector. Depending on your seniority, you will either drive or support the full spectrum of information security and cyber resilience work: assessing security policies, controls and change requests; planning and conducting red team tests / threat-led penetration testing (TLPT); developing and executing cyber resilience strategies; operating security controls and tools; and managing the detection, analysis of and response to security incidents.

What you'll do

• Review and assess security policies, controls and change requests, risk evaluation, governance alignment, impact assessment
• Plan, organise and conduct red team / TLPT exercises in financial infrastructure environments
• Develop and implement cyber resilience strategies
• Implement and operate security controls and tools (SIEM, EDR, vulnerability management)
• Detect, analyse and respond to security incidents
• At senior level: advise on regulatory frameworks (forensics, fraud detection, financial crime) and provide project management for complex, multi-stakeholder initiatives

What you bring

• 2+ years (Associate) or 6+ years (Senior) of hands-on information security and cyber resilience experience
• Practical red team or penetration testing experience, senior candidates: 3+ years planning and leading such tests
• Experience implementing/operating security controls and developing resilience strategies
• Senior candidates additionally: 5+ years in resilience strategy and in project management within regulated environments
• Business-fluent English; willingness to undergo security screening for on-site work

Nice to have

• Experience with payment, securities settlement or collateral management systems
• DLT knowledge
• CISSP / CISA or equivalent
• Agile / PRINCE2 / PMP
• incident response frameworks

Work at the heart of Europe's financial infrastructure on topics that matter, resilience, threat-led testing, regulatory-grade security, in a boutique consultancy where your profile is visible, not buried.