Highly Skilled Cyber Security Specialist Wanted

Seeking a highly skilled Cyber Security professional to join our team. This role offers the chance for an individual with strong experience in security Compliance and Risk Management frameworks to grow in the field of Cyber Security.

This is a unique opportunity for someone who is passionate about Cyber Security and wants to make a real difference in this exciting field.

• Audit and Assessment: Perform and run audits, certification programs, and control assessments, including scope planning, defining control procedures based on requirements, policies, and standards, control testing, mapping issues to risks, and socializing results.
• Compliance Coordination: Coordinate audit-related tasks to ensure managers and their teams are ready for audit testing and facilitate timely resolution of any audit findings.
• Regulatory Knowledge: Have strong knowledge of common security legal and regulatory requirements (e.g., PCI, SOC, CSA STAR, NIST, ISO/IEC 27001, COBIT, etc.).
• Compliance Initiatives: Work on compliance initiatives to ensure operational effectiveness with applicable laws and regulations, as well as internal policies and procedures.
• IT Monitoring: Monitor IT activities to ensure compliance with internal policies and standards.
• Documentation: Assist Corporate Compliance and Business with all required compliance/security-related documentation.
• External Audits: Facilitate external audits to ensure compliance with industry-mandated regulations.
• Business Initiatives: Participate in developing and implementing new business initiatives to ensure functionality required to support compliance.
• Guidance: Provide guidance to business functions on compliance/security-related matters.
• Technical Knowledge: Have good understanding of IT concepts, including Cloud hosting, containerization, encryption, networking, operating systems, databases, middleware, and applications.
• Cloud Experience: Knowledge of Cloud technologies/environments, AWS or other related cloud experience is required.
• Communication: Ability to effectively communicate to all levels of the organization, including senior management, and other stakeholders that influence the security and compliance posture of the company.
• Control Assessment: Ability to assess controls and identify automation opportunities for increased monitoring and scaling coverage.

• Qualifications: Bachelor's degree in Information Security, Computer Science, or related discipline and/or certifications (e.g., ISO 27001 LI/LA, ISA/QSA, CISSP, CISA, CISM, GIAC).
• Experience: Demonstrated ability to apply IT-related knowledge and experience in solving compliance issues.
• Cloud Security: Experience implementing cloud security and compliance standards, frameworks, and controls (ISO/IEC 27001, SOC 2, PCI, NIST) for cloud service delivery models (IaaS, PaaS, SaaS).
• AWS Certification: AWS Certifications (added advantage).
• GRC Process: Experience or understanding of governance, risk, and compliance (GRC) processes and solutions.
• Security Background: Background in security controls, auditing, network, and system security.
• Communication Skills: Ability to express technical concepts in business terms.
• Project Management: Able to work under deadlines in a changing environment and complete multiple projects effectively and concurrently.
• Internal Control Evaluation: Evaluate the effectiveness of the internal security control framework and recommend adjustments as business needs change.
• Regular Interaction: Regularly interact with management to present and discuss audit results and obtain gap remediation status.