We are seeking a skilled and detail-oriented Network Security profession to support IT audit and risk advisory initiatives. The role focuses on assessing, auditing, and strengthening client network security environments through risk-based methodologies, compliance frameworks, and industry best practices. The candidate will work with cross-functional teams to evaluate network security controls, identify vulnerabilities, and support remediation efforts.

• Assess network architecture, for security Zoning based on network & data flow architecture adhering to CISA Zero Trust Architecture Framework and segmentation controls.
• Evaluate security controls against frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, and applicable regulatory controls.
• Perform configuration reviews of various technologies, including but not limited to network switches, routers, firewalls, WAF, Active Directory, proxies, VPN, IDS/IPS, antivirus, and DLP solutions.
• Identify control gaps and recommend remediation actions.
• Review firewall rules, access controls, and secure configurations.
• Maintain audit documentation and working papers.
• Collaborate with stakeholders to understand risks and controls.
• Stay updated on emerging threats and security practices.

Key Skills required: 

• Minimum 2 years of experience in network security, or cybersecurity.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP).
• Hands-on experience with firewalls (Fortinet, Cisco, Palo Alto, Check Point).
• Knowledge of VPNs, WAF, Proxy, SIEM, IDS/IPS, and endpoint security controls.
• Basic understanding of cloud security (AWS/Azure).
• Certifications :  At least one OEM certification such as CCNA/CCNA Security, NSE 4+, PCNSA, or CCSA.
• CEH, Security+, or ISO 27001 Lead Auditor/Implementer.
• Education: Bachelor’s degree in information security, Computer Science, or a related field.