Cybersecurity Risk & Assurance Specialist

Key Responsibilities Conduct cybersecurity risk and maturity assessments using industry-standard frameworks. Perform gap assessments against NIST CSF, ISO 27001, CIS Controls , and regulatory requirements. Assess cybersecurity governance, policies, standards, regulations, and security controls. Support cybersecurity strategies, roadmaps, and improvement plans. Identify cybersecurity risks and recommend practical remediation measures. Conduct cybersecurity risk assessments, third-party risk assessments, security maturity assessments, governance reviews, incident-response readiness assessments, and regulatory compliance reviews. Conduct stakeholder interviews, workshops, and assessment sessions. Document findings, risks, and recommendations. Present assessment results and remediation recommendations to client teams. Support project managers and engagement leads in cybersecurity program delivery. Required Experience 4–6 years of experience in Cybersecurity, Information Security, IT Risk, Technology Risk, or Cyber Consulting. Experience delivering cybersecurity assessments, audits, compliance, and advisory engagements . Strong understanding of information security principles, risk management, and security testing. Experience working with enterprise clients or large organizations. Ability to work independently and collaborate effectively with project teams. Preferred Technical Skills Cybersecurity Risk Management Security Governance NIST Cybersecurity Framework (NIST CSF) ISO 27001 Third-Party Risk Management Incident Response & Recovery Vulnerability Management Red Teaming Penetration Testing Education & Certifications Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science , or a related field. Preferred certifications: CISM, CISSP, CRISC, CEH, GIAC, or OSCP . Key Competencies Strong analytical and problem-solving skills. Excellent report writing and documentation. Strong verbal and written communication. Client-facing consulting experience. Stakeholder management skills. Ability to explain technical concepts in business-friendly language. Strong attention to detail and teamwork.