Responsibilities
- Cybersecurity Risk & Advisory: Perform and support risk assessments across IT systems, cloud environments, applications, and third-party services. Contribute to maintaining the risk register and support the definition of mitigation strategies and security improvements
- Security Architecture Support: Assist in the design and review of secure architectures across on-premise and cloud environments. Provide input on security controls, identity & access management, network segmentation, and secure system design principles.
- Data Security & Privacy: Support the implementation and assessment of data protection measures, including classification, encryption, data lifecycle management, and compliance with privacy and regulatory requirements.
- Disaster Recovery (DR) Planning: Participate in disaster recovery planning and testing activities,
supporting the validation and continuous improvement of recovery capabilities.
- Cyber Incident & Crisis Support: Collaborate with security operations and incident response teams to ensure effective integration of incident scenarios into crisis management and resilience processes.
- Governance, Risk & Compliance (GRC) support: Provide support in aligning cybersecurity practices with relevant frameworks and standards (e.g., ISO 27001, NIST, QSF, NIA). Assist in audits, control assessments, and evidence collection activities.
- Third-Party security risk management: Evaluate and monitor cybersecurity risks related to vendors and partners, supporting due diligence activities and tracking remediation actions.
- Continuous Improvement: Support ongoing enhancement of cybersecurity risk and resilience practices by incorporating lessons learned, regulatory updates, and evolving business needs.
Qualifications
- Bachelor's in Information Security, IT, or related field (or equivalent experience).
- Experience: 2-3 years in cybersecurity consulting or audit
- Languages: Strong English required
- Certifications:
- ISO/IEC 27001
- ISO/IEC 22301
