Security/ Threat & Risk Consultant (Qatar location)

Capco Poland is a global leader in technology and management consulting, specializing in digital transformation within financial services including banking, payments, capital markets, wealth, and asset management. The company emphasizes a fast, flexible, and entrepreneurial culture and is engaged in delivering consulting services across these financial domains.

• Strong experience in cybersecurity risk assessment, threat assessment, technology risk, or information security.
• Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning.
• Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements.
• Understanding of cybersecurity frameworks, governance, risk management, regulatory requirements, and security-by-design principles.
• Clear communication and stakeholder management skills to translate technical threats into business risks.

Nice to have:

• Experience in banking, financial services, or regulated environments.
• Knowledge of recognized cybersecurity and risk frameworks, industry security standards.
• Experience with threat modelling methodologies, security testing, vulnerability management, or cyber threat intelligence.
• Relevant cybersecurity, technology risk, cloud, or information security certifications.
• Exposure to large-scale cybersecurity, cloud, regulatory, or technology transformation programs.

• Assess existing security controls and evaluate their effectiveness against cyber and technology risks.
• Identify threats, vulnerabilities, control gaps, and risk scenarios with documented findings and remediation recommendations.
• Conduct regular data, threat, and risk assessments and suggest corrective actions to enhance security posture.
• Collaborate with security, architecture, engineering, risk, and business stakeholders to integrate threat and risk assessment in technology change and delivery.
• Perform threat and risk assessments across infrastructure, cloud environments, technology platforms, and business services.
• Produce clear risk assessments, reports, and recommendations supporting governance, remediation planning, risk acceptance, and informed decision-making.

Candidates must be willing to relocate to the Middle East (Qatar) for the duration of the one-year project.