Cyber Security Risk Specialist

Your tasks

Experience supporting audits and regulatory compliance Partner with project managers, architects, developers, infrastructure teams, legal, procurement, and business stakeholders.

Identify threats, vulnerabilities, attack paths, and business impacts.

Providing cybersecurity guidance throughout project lifecycles

Perform cybersecurity assessments on vendors, suppliers, managed service providers, and SaaS solutions.

Review vulnerability assessment and penetration testing reports.

Assess risks using the organisation's cybersecurity risk methodology.

Responsible for identifying, assessing, and managing cybersecurity risks across business initiatives, technology implementations, third-party services, and operational environments.

The specialist acts as a trusted advisor to project teams, business stakeholders, and technology teams, enabling secure business transformation while maintaining an effective risk posture.

Conducting cybersecurity risk assessments (e.g., Security Risk Assessments (SRA), Threat Modelling, Architecture Reviews) for new and existing systems

Reviewing solution architectures for on-premise, cloud, SaaS, APIs, AI solutions, and mobile applications

Reviewing security assurance documentation (e.g., SOC 2 Type II, ISO 27001, penetration test reports).

Requirements

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or related discipline

Hand on Experience in conducting cybersecurity risk assessments

Working Experience in retail with third-party security assessments