Cyber Security Risk Specialist
Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or related discipline
Hand on Experience in conducting cybersecurity risk assessments
Working Experience in retail with third-party security assessments
Experience supporting audits and regulatory compliance
Partner with project managers, architects, developers, infrastructure teams, legal, procurement, and business stakeholders.
Identify threats, vulnerabilities, attack paths, and business impacts.
Providing cybersecurity guidance throughout project lifecycles
Perform cybersecurity assessments on vendors, suppliers, managed service providers, and SaaS solutions.
Review vulnerability assessment and penetration testing reports.
Assess risks using the organisation's cybersecurity risk methodology.
Responsible for identifying, assessing, and managing cybersecurity risks across business initiatives, technology implementations, third-party services, and operational environments.
The specialist acts as a trusted advisor to project teams, business stakeholders, and technology teams, enabling secure business transformation while maintaining an effective risk posture.
Key Responsibilities
Conducting cybersecurity risk assessments (e.g., Security Risk Assessments (SRA), Threat Modelling, Architecture Reviews) for new and existing systems
Reviewing solution architectures for on-premise, cloud, SaaS, APIs, AI solutions, and mobile applications
Reviewing security assurance documentation (e.g., SOC 2 Type II, ISO 27001, penetration test reports).