Cybersecurity Risk & Assurance Specialist
Must-have:Security
Key Responsibilities
- Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
- Perform gap assessments against NIST CSF, ISO 27001, CIS Controls , and regulatory requirements.
- Assess cybersecurity governance, policies, standards, regulations, and security controls.
- Support cybersecurity strategies, roadmaps, and improvement plans.
- Identify cybersecurity risks and recommend practical remediation measures.
- Conduct cybersecurity risk assessments, third-party risk assessments, security maturity assessments, governance reviews, incident-response readiness assessments, and regulatory compliance reviews.
- Conduct stakeholder interviews, workshops, and assessment sessions.
- Document findings, risks, and recommendations.
- Present assessment results and remediation recommendations to client teams.
- Support project managers and engagement leads in cybersecurity program delivery.
Required Experience
- 4–6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
- Experience delivering cybersecurity assessments, audits, compliance, and advisory engagements .
- Strong understanding of information security principles, risk management, and security testing.
- Experience working with enterprise clients or large organizations.
- Ability to work independently and collaborate effectively with project teams.
Preferred Technical Skills
- Cybersecurity Risk Management
- Security Governance
- NIST Cybersecurity Framework (NIST CSF)
- ISO 27001
- Third-Party Risk Management
- Incident Response & Recovery
- Vulnerability Management
- Red Teaming
- Penetration Testing
Education & Certifications
- Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science , or a related field.
- Preferred certifications: CISM, CISSP, CRISC, CEH, GIAC, or OSCP .
Key Competencies
- Strong analytical and problem-solving skills.
- Excellent report writing and documentation.
- Strong verbal and written communication.
- Client-facing consulting experience.
- Stakeholder management skills.
- Ability to explain technical concepts in business-friendly language.
- Strong attention to detail and teamwork.