Cybersecurity Risk & Assurance Specialist

Key Responsibilities • Conduct cybersecurity risk and maturity assessments using industry-standard frameworks. • Perform gap assessments against NIST CSF, ISO 27001, CIS Controls , and regulatory requirements. • Assess cybersecurity governance, policies, standards, regulations, and security controls. • Support cybersecurity strategies, roadmaps, and improvement plans. • Identify cybersecurity risks and recommend practical remediation measures. • Conduct cybersecurity risk assessments, third-party risk assessments, security maturity assessments, governance reviews, incident-response readiness assessments, and regulatory compliance reviews. • Conduct stakeholder interviews, workshops, and assessment sessions. • Document findings, risks, and recommendations. • Present assessment results and remediation recommendations to client teams. • Support project managers and engagement leads in cybersecurity program delivery. Required Experience • 4–6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting. • Experience delivering cybersecurity assessments, audits, compliance, and advisory engagements . • Strong understanding of information security principles, risk management, and security testing. • Experience working with enterprise clients or large organizations. • Ability to work independently and collaborate effectively with project teams. Preferred Technical Skills • Cybersecurity Risk Management • Security Governance • NIST Cybersecurity Framework (NIST CSF) • ISO 27001 • Third-Party Risk Management • Incident Response & Recovery • Vulnerability Management • Red Teaming • Penetration Testing Education & Certifications • Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science , or a related field. • Preferred certifications: CISM, CISSP, CRISC, CEH, GIAC, or OSCP . Key Competencies • Strong analytical and problem-solving skills. • Excellent report writing and documentation. • Strong verbal and written communication. • Client-facing consulting experience. • Stakeholder management skills. • Ability to explain technical concepts in business-friendly language. • Strong attention to detail and teamwork.