security and risk consultant