Planning, managing, and executing cyber assessments to ensure regulatory compliance and secure the network operations of entities under the organization's responsibility.
Key Responsibilities
Responsible for identifying and mitigating cyber risks through risk surveys, audits, and technological assessments.
- Risk Identification and Mapping: Examining and mapping network architecture, assets, processes, and security control.
- Technological Validations: Performing technical tests to verify the effectiveness of security controls.
- Damage Potential: Analyzing the correlation between threats, vulnerabilities, and controls, and assessing their impact on the organization's overall exposure level.
- Professional Opinion: Providing evidence-based recommendations.
Minimum Requirements
- Experience in Risk Surveys: Proven experience in end-to-end risk surveys (planning, evidence collection, findings analysis, and drafting professional opinions).
- Hands-On: Practical experience in scanning tools, asset mapping, network configuration audits, and control validation.
- Standards: Familiarity with methodologies and standards, including ISO 27001, 27005, 19011, NIST-CSF, and SCF.
Required Skills
- Critical Analysis: Ability to analyze complex information, identify gaps, and derive evidence-based conclusions.
- Interface Management: Ability to work with diverse stakeholders while maintaining professionalism and independence.
