Cybersecurity Consultant (Interim/Freelance)

Immediate Opportunity for an Experienced Cybersecurity Consultant

We are supporting an innovative Swiss SaaS company that is looking for a seasoned cybersecurity professional to strengthen its security posture following a recently contained security incident related to a partner SSO integration.

This is an ideal engagement for a hands-on Security Consultant, Security Architect, Cloud Security Specialist, or fractional CISO who enjoys working closely with engineering teams and driving pragmatic security improvements.

Location: Zug (Hybrid)
Remote with occasional on-site presence
Start: ASAP
Duration: 6-8 weeks initially
Workload: 2-3 days per week

What You'll Do

• Review incident analysis, remediation activities, and remaining security gaps
• Conduct a security assessment of the platform and cloud environment
• Evaluate authentication and authorization mechanisms, including OAuth2, OIDC, SAML, JWT, MFA, and partner SSO integrations
• Review API security, secrets management, logging, monitoring, alerting, and cloud security controls
• Assess Azure services including PostgreSQL, Redis, Storage, Private Endpoints, and Defender
• Define and coordinate external penetration testing activities
• Support responses to customer security questionnaires and audits
• Advise on requirements related to ISO 27001, NIST CSF, data residency, audit logging, backup and recovery testing, and customer audit rights
• Develop and prioritize a roadmap toward ISO 27001 readiness

Required Experience 5+ years of experience in Information Security

Strong hands-on experience with:

• Azure Cloud Security
• Microsoft Entra ID (Azure AD)
• OAuth2, OpenID Connect (OIDC), SAML, JWT
• Web and SaaS application security
• API security
• Incident response and remediation

Experience with:

• ISO 27001 implementation and/or auditing
• Security assessments and customer compliance requirements
• GDPR and Swiss Data Protection Act (nDSG)

Comfortable working directly with engineering teams in a fast-paced environment

Nice to Have

• CISSP
• CISM
• OSCP
• ISO 27001 Lead Implementer
• ISO 27001 Lead Auditor

Ideal Background We are particularly interested in professionals who have worked as:

• Security Architect
• Cloud Security Consultant
• Information Security Consultant
• vCISO/Fractional CISO
• Application Security Consultant
• Azure Security Specialist

Experience supporting public sector, transportation, industrial, or regulated customers is highly beneficial.

By applying for this role, you consent to SGI contacting you by telephone regarding recruitment services, market updates, and relevant business opportunities

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.
Source Group International Ltd is acting as an Employment Business in relation to this vacancy