Job Summary

• 5+ years of experience in Cyber Security, Information Security, or Risk Management.
• Strong understanding of Cyber Risk Assessment methodologies.
• Experience with security governance, compliance, and control frameworks.
• Knowledge of vulnerability management and security operations processes.
• Experience in incident response and security investigations.
• Understanding of cloud security principles (Azure/AWS/GCP).
• Strong stakeholder management and communication skills.
• Ability to prepare executive-level risk and compliance reports.

Key Responsibilities

Role Summary

We are seeking a Cyber Security & Risk Management Specialist to strengthen the organization's security posture by identifying, assessing, and mitigating cybersecurity risks. The role will be responsible for implementing security controls, conducting risk assessments, supporting regulatory compliance initiatives, managing security incidents, and driving cybersecurity governance across the enterprise.

Key Responsibilities

Cyber Security Governance

• Develop and maintain cybersecurity policies, standards, procedures, and controls.
• Support implementation of enterprise security frameworks and governance practices.
• Conduct periodic reviews of security controls and ensure adherence to organizational standards.
• Collaborate with business, technology, and audit teams to address security risks.

Risk Management

• Perform cyber risk assessments for applications, infrastructure, cloud environments, and third-party vendors.
• Identify, analyze, and document risks, threats, vulnerabilities, and business impacts.
• Develop risk mitigation plans and track remediation activities.
• Maintain enterprise risk registers and perform risk reporting to management.
• Conduct control effectiveness reviews and gap assessments.

Security Operations & Incident Management

• Monitor and support security incident identification, investigation, and remediation.
• Coordinate with SOC teams during security incidents.
• Perform root cause analysis and recommend preventive measures.
• Participate in cyber crisis management and incident response exercises.

Compliance & Audit

• Support compliance initiatives related to ISO 27001, NIST, SOC2, PCI-DSS, GDPR, and regulatory requirements.
• Facilitate internal and external security audits.
• Track audit observations and ensure timely closure of remediation actions.
• Prepare compliance and risk reports for leadership reviews.

Vulnerability & Threat Management

• Manage vulnerability assessment and remediation programs.
• Review penetration testing findings and coordinate corrective actions.
• Conduct threat analysis and evaluate emerging cyber risks.
• Ensure critical vulnerabilities are addressed within defined SLA timelines.

Cloud Security

• Assess and monitor security controls in Azure, AWS, or GCP environments.
• Review cloud configurations against security best practices.
• Support identity and access management initiatives, including MFA and privileged access controls.
• Evaluate cloud security risks and recommend mitigation strategies.

Third-Party Risk Management

• Conduct vendor security assessments.
• Evaluate supplier compliance with organizational security requirements.
• Monitor third-party risks and recommend mitigation controls.
• Support onboarding and periodic review of critical vendors.

Skill Requirements

Other Requirements