we are looking for a cybersecurity professional with experience conducting security and risk assessments for technology projects and applications.
key responsibilities
- conduct cybersecurity risk and information security assessments for technology projects and applications.
- review security controls and supporting evidence to identify gaps and potential risks.
- track remediation activities and corrective actions through closure.
- support the evaluation and management of residual risk and compensating controls.
- coordinate with project teams, developers, vendors, and information security stakeholders.
- support or coordinate security testing activities, including penetration testing and sast.
- assess security requirements across cloud environments, including iam and data protection.
- contribute to security reviews involving emerging technologies and ai-enabled applications.
requirements
- 3+ years of recent experience in information security assessment, cybersecurity risk assessment, or compliance.
- hands-on experience reviewing security controls, evidence, findings, and remediation activities.
- knowledge of cybersecurity frameworks such as nist 800-53, nist 800-171, nist csf, iso 27001, pci, cmmc, hitrust, or equivalent .
- understanding of secure software development and application security principles.
- foundational knowledge of cloud security, iam, and data protection .
- experience working with multidisciplinary teams and technical/non-technical stakeholders.
- english b2 or higher.
preferred
- cissp or cisa certification.
- exposure to ai security or risk assessment for ai-enabled applications.