Cybersecurity Risk & Assurance Specialist

Key Responsibilities

• Conduct cybersecurity risk and maturity assessments using industry-standard frameworks.
• Perform gap assessments against NIST CSF, ISO 27001, CIS Controls, and regulatory requirements.
• Assess cybersecurity governance, policies, standards, regulations, and security controls.
• Support cybersecurity strategies, roadmaps, and improvement plans.
• Identify cybersecurity risks and recommend practical remediation measures.
• Conduct cybersecurity risk assessments, third-party risk assessments, security maturity assessments, governance reviews, incident-response readiness assessments, and regulatory compliance reviews.
• Conduct stakeholder interviews, workshops, and assessment sessions.
• Document findings, risks, and recommendations.
• Present assessment results and remediation recommendations to client teams.
• Support project managers and engagement leads in cybersecurity program delivery.

Required Experience

• 4-6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting.
• Experience delivering cybersecurity assessments, audits, compliance, and advisory engagements.
• Strong understanding of information security principles, risk management, and security testing.
• Experience working with enterprise clients or large organizations.
• Ability to work independently and collaborate effectively with project teams.

Preferred Technical Skills

• Cybersecurity Risk Management
• Security Governance
• NIST Cybersecurity Framework (NIST CSF)
• ISO 27001
• Third-Party Risk Management
• Incident Response & Recovery
• Vulnerability Management
• Red Teaming
• Penetration Testing

Education & Certifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
• Preferred certifications: CISM, CISSP, CRISC, CEH, GIAC, or OSCP.

Key Competencies

• Strong analytical and problem-solving skills.
• Excellent report writing and documentation.
• Strong verbal and written communication.
• Client-facing consulting experience.
• Stakeholder management skills.
• Ability to explain technical concepts in business-friendly language.
• Strong attention to detail and teamwork.