We are looking for an experienced Information Security Assessment professional to support initiatives that strengthen the organisation's security posture through effective security controls, technology, and processes.
The role involves working closely with project and BAU teams to assess security controls against organisational policies, standards, and security best practices. You will identify control gaps, assess risks and compensating controls, review supporting evidence, and contribute to improvements in security assessment and technology management processes.
Key Responsibilities
- Conduct security assessments of systems and solutions against established security policies, standards, and best practices.
- Analyse implemented security controls, identify gaps, assess risks, and determine the adequacy of compensating controls.
- Review and maintain security assessment documentation and supporting artefacts.
- Contribute to the assessment and improvement of technology management and security processes.
- Support security tools deployment and scanning within agreed timelines.
- Work with project, BAU, technology, and business teams to address security findings and requirements.
- Prepare regular security risk, assessment, metrics, and project status reports.
- Identify opportunities to improve security assessment processes and strengthen control effectiveness.
Requirements
- Relevant experience in Cybersecurity, Security Assurance, Security Assessment, Technology Risk, or a related discipline.
- Good understanding of security principles, security controls, and key security technologies.
- Experience assessing controls against policies, standards, frameworks, or security best practices.
- Strong analytical skills with the ability to identify control gaps, security risks, and appropriate mitigation measures.
- Good experience in security documentation, assessment reporting, and maintaining supporting evidence.
- Familiarity with security assessment, vulnerability scanning, or security management tools.
- Strong communication skills with the ability to work effectively with technical and non-technical stakeholders.
- Able to work independently, manage multiple activities, and meet agreed timelines.
- Demonstrates a commitment to continuous improvement and sustainable security solutions.
