Security Risk Consultant
Location: Hybrid. Poland / Doha, Qatar (1 year relocation) | Practice Area: Technology & Engineering
Please note: We are considering Poland / Qatar based candidates.
The Role
Capco is a global technology and business consultancy, focused on the financial services and energy sectors. We combine innovative thinking with deep industry expertise to help our clients solve complex business and technology challenges.
Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You’ll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls.
This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture.
What You’ll Do
- Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks.
- Identify potential threats, vulnerabilities, control gaps, and risk scenarios, documenting findings and recommending proportionate remediation actions.
- Conduct regular data, threat and risk assessments and recommend corrective actions to improve security posture.
- Work with security, architecture, engineering, risk, and business stakeholders to embed threat and risk assessment activities throughout technology change and delivery.
- Conduct threat and risk assessments across infrastructure, cloud environments, technology platforms, and business services.
- Produce clear risk assessments, reports, and recommendations that support governance, remediation planning, risk acceptance, and informed decision-making.
What We’re Looking For
- Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines.
- Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning.
- Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements.
- Strong understanding of cybersecurity frameworks, governance, risk management, regulatory requirements, and security-by-design principles.
- Clear communication and stakeholder management skills, with the ability to translate technical threats and vulnerabilities into understandable business risks.
Bonus Points For
- Experience delivering threat and risk assessments within banking, financial services, or another regulated environment.
- Knowledge of recognised cybersecurity and risk frameworks and industry security standards.
- Experience with threat modelling methodologies, security testing, vulnerability management, or cyber threat intelligence.
- Relevant cybersecurity, technology risk, cloud, or information security certifications.
- Exposure to large-scale cybersecurity, cloud, regulatory, or technology transformation programmes.
ONLINE RECRUITMENT PROCESS STEPS
- Screening call with the Recruiter
- Hiring Manager Technical Interview
- Client Interview
- Feedback/Offer
#LI-HYBRID
Skills Required
- Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines.
- Practical knowledge of threat modeling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning.
- Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements.
- Strong understanding of cybersecurity frameworks, governance, risk management, regulatory requirements, and security-by-design principles.
- Clear communication and stakeholder management skills, including translating technical threats and vulnerabilities into business risks.
- Experience delivering threat and risk assessments within banking, financial services, or another regulated environment.
- Knowledge of recognized cybersecurity and risk frameworks and industry security standards.
- Experience with threat modeling methodologies, security testing, vulnerability management, or cyber threat intelligence.
- Relevant cybersecurity, technology risk, cloud, or information security certifications.
- Exposure to large-scale cybersecurity, cloud, regulatory, or technology transformation programs.
What the Team is Saying
What We Do
Capco, a Wipro company, is a global management and technology consultancy specializing in driving transformation in the energy and financial services industries. Capco operates at the intersection of business and technology by combining innovative thinking with unrivalled industry knowledge to fast-track digital initiatives for banking and payments, capital markets, wealth and asset management, insurance, and the energy sector. Capco’s cutting edge ingenuity is brought to life through its award-winning Be Yourself At Work culture and diverse talent. TRUSTED ADVISORS - Our collaborative and entrepreneurial approach position us as trusted long-term partners to our clients. DEEP EXPERTISE - Clients look to us for clear guidance, proven expertise, and the support they need to set their companies up for success. DISRUPTIVE SOLUTIONS- We do not provide off -the-shelf answers to clients’ challenges. Instead, we work in close collaboration to understand the issues, and craft disruptive, bespoke solutions. ACCOUNTABILITY AND OWNERSHIP - We recognize every client has distinct needs and expectations, and we take ownership and accountability for the solutions we design, build, and deliver.
Why Work With Us
We support and encourage an inclusive culture, entrepreneurial outlook and independent thinking. Capco is not about organizational charts and rigid hierarchies – we want all employees to feel that Capco is their firm to own and run. We believe diversity powers innovation. Be Yourself At Work (#BYAW) is an integral and underlying part of our culture
Gallery
Capco Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
