Responsibilities:

- Plans and conducts cybersecurity risk assessments across infrastructure, applications and cloud environments.

- Assesses compliance against IM8 and other applicable security requirements using documented evidence and defined assessment criteria.

- Performs vulnerability assessments and security configuration reviews, analyses findings and validates risk and remediation priorities.

- Supports security audits by preparing assessment plans, reviewing evidence, documenting observations and tracking findings to closure.

- Reviews cloud security posture through CSPM findings and evaluates cloud security risks and control gaps.

- Supports incident management activities, including assessment of security impact, coordination of actions and documentation of outcomes.

- Coordinates vulnerability management activities, including review, prioritisation, remediation tracking and risk acceptance inputs.

- Produces clear assessment reports that describe scope, evidence, findings, risk impact and recommended corrective actions.

- Maintains sufficient independence from personnel implementing the controls being assessed and highlights potential conflicts of interest.

- Communicates assessment results and security risks to client stakeholders and relevant delivery teams.

- Tracks assigned actions and deliverables to completion within agreed timelines and service requirements.

- Contributes to knowledge sharing, assessment templates and continuous improvement of cybersecurity consulting practices.

- Performs any other related task as required.

Requirements:

- Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).

- Certifications relevant to the services provided carry additional weightage on a candidate's qualification for the role.

- 6+ years of overall relevant experience.

- 5+ years of experience in Cybersecurity Consulting, Risk, Compliance, VA and Cloud Security.

- Demonstrated experience in security risk assessment, IM8/security compliance, VA, security configuration review, audit, CSPM, incident management, vulnerability management and cloud security.

- Demonstrated ability to perform assessments independently from personnel implementing the controls being assessed.

Required certification(s):

- CISSP, CRISC, or equivalent certification.

Good-to-have certification(s):

- CISA.

- CGEIT.

- AWS Certified Security - Specialty.

Licence no:L 12C6060