Senior Associate, Cyber Assessment
We are looking for a cybersecurity professional with experience conducting security and risk assessments for technology projects and applications.
Key Responsibilities
- Conduct cybersecurity risk and information security assessments for technology projects and applications.
- Review security controls and supporting evidence to identify gaps and potential risks.
- Track remediation activities and corrective actions through closure.
- Support the evaluation and management of residual risk and compensating controls.
- Coordinate with project teams, developers, vendors, and Information Security stakeholders.
- Support or coordinate security testing activities, including penetration testing and SAST.
- Assess security requirements across cloud environments, including IAM and data protection.
- Contribute to security reviews involving emerging technologies and AI-enabled applications.
Requirements
- 3+ years of recent experience in Information Security Assessment, Cybersecurity Risk Assessment, or Compliance.
- Hands-on experience reviewing security controls, evidence, findings, and remediation activities.
- Knowledge of cybersecurity frameworks such as NIST 800-53, NIST 800-171, NIST CSF, ISO 27001, PCI, CMMC, HITRUST, or equivalent.
- Understanding of secure software development and application security principles.
- Foundational knowledge of Cloud Security, IAM, and data protection.
- Experience working with multidisciplinary teams and technical/non-technical stakeholders.
- English B2 or higher.
Preferred
- CISSP or CISA certification.
- Exposure to AI Security or risk assessment for AI-enabled applications.