ROLE & RESPONSIBILTY:
• Conduct thorough and detailed cyber risk assessments for our clients, analyzing their digital infrastructure, systems, and security controls.
• Collaborate with cross-functional teams to gather essential information and data required for comprehensive risk assessments.
• Evaluate and interpret assessment results to identify potential vulnerabilities and risks, and provide actionable recommendations for risk mitigation.
• Stay up-to-date with the latest cyber threats, attack vectors, and industry best practices to enhance the effectiveness of risk assessments.
• Prepare and deliver clear and concise reports summarizing the findings of risk assessments to clients and internal stakeholders.
• Provide expert advice and consultancy to clients, guiding them in implementing robust cybersecurity risk management strategies.
• Mentor and support junior team members to foster their professional growth and skills in cyber risk assessments.
REQUIREMENTS:
•Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or related fields.
•A minimum of 5+ years of hands-on experience in conducting cyber risk assessments and related security assessments.
•Industry certifications such as CISSP, CCSP, CISA, CISM, CRISC, ISO/IEC:27001/22301/20000 LI/LA or equivalent are highly valued.
•Profound knowledge of cybersecurity frameworks, industry standards, and best practices.
•Proficiency in using various security assessment and techniques.
•Strong analytical and problem-solving skills, with the ability to think critically and strategically.
•Excellent communication and presentation skills, capable of effectively communicating technical concepts to both technical and non-technical audiences.
•Demonstrated experience in project management and handling multiple assessments simultaneously.
•A proactive and self-motivated approach to work, with a commitment to continuous learning and professional development.
•Network Security, infrastructure assessment and network architecture design review.
•Conceptual knowledge of OT Security/ISA 62443 standard is preferable.