Senior Business Information Security Consultant

Role: Senior Business Information Security Consultant



Location: Remote



Duration: Through December 2027

• Seeking a senior, client-facing cybersecurity consultant with strong experience in business information security, application/cloud security assessments, secure SDLC, risk identification, and practical remediation planning.
• The ideal candidate has supported large enterprise applications-preferably Salesforce-and understands life sciences/pharma regulations, data privacy, third-party risk, and emerging AI security risks.

Key Responsibilities

• Provide business information security guidance throughout the application development and deployment lifecycle.
• Ensure the CRM platform complies with secure SDLC practices and required enterprise security controls.
• Identify application security risks, control gaps, privacy concerns, and compliance issues.
• Develop practical remediation recommendations and help project teams resolve identified findings.
• Support security assessments of applications, integrations, third-party tools, new functionality, and AI capabilities.
• Partner with Security Architecture, Data Security, Third-Party Risk Management, Governance, Privacy, and Compliance teams.
• Track security findings through remediation and closure.
• Communicate technical risks, priorities, and recommendations clearly to business and technology leadership.
• Balance cybersecurity requirements with business objectives, project timelines, and global program needs.

Required Qualifications

• Senior-level experience in business information security, application security, cybersecurity consulting, or a related field.
• Strong understanding of secure-by-design principles and security requirements across the SDLC.
• Experience assessing enterprise applications, cloud platforms, system integrations, and third-party technologies.
• Experience identifying security risks and developing actionable remediation plans.
• Knowledge of security governance, risk management, data protection, regulatory compliance, and enterprise security controls.
• Understanding of Security Architecture, Data Security, and Third-Party Risk Management.
• Ability to assess privacy and security risks associated with AI-enabled functionality.
• Strong client-facing communication and stakeholder-management skills.
• Experience working across global technology, security, compliance, and business teams.

Preferred Qualifications

• Experience supporting Salesforce implementations, ideally Salesforce Life Sciences Cloud.
• Pharmaceutical, life sciences, healthcare, or other highly regulated industry experience.
• Experience with AI governance, AI security assessments, data privacy, and responsible AI.
• Experience supporting large-scale global application-development or digital-transformation programs.
• Certifications such as CISSP, CISM, CCSP, CRISC , or Salesforce security credentials.