Cybersecurity Security Assessment Specialist - Remote

Role Objective

Be responsible for conducting security reviews and risk assessments of projects, applications, architectures, and third-party providers, identifying security risks, gaps, and missing controls from an information security perspective.

The role will analyze evidence and reports from different cybersecurity areas, assess them against security policies, standards, and frameworks, and follow up on the corresponding mitigation actions.

Profile Requirements

• 3 to 5 years of experience specifically in Security Reviews, Security Assessments, and/or Security Risk Assessments.
• Experience in information security/cybersecurity risk; profiles focused exclusively on financial, operational, physical, or asset-related risk will not be considered.
• Broad knowledge of different cybersecurity areas, including SOC, vulnerability management, penetration testing, incident management, security governance, and compliance.
• Experience assessing projects, applications, architectures, and/or third-party providers from a security perspective.
• Knowledge of security frameworks, standards, and controls such as NIST, ISO, PCI DSS, and OWASP, among others.
• Knowledge of cryptography and encryption.
• Ability to analyze technical documentation, evidence, and reports and identify relevant security risks.
• Advanced English, with the ability to communicate and collaborate with international teams.
• Desirable: Certifications such as CISSP or CRISC.

Key Responsibilities

• Conduct Security Reviews and Security Risk Assessments.
• Assess projects, applications, architectures, and third-party providers based on security criteria.
• Review documentation and evidence provided by SOC, vulnerability management, incident management, penetration testing, and risk teams.
• Identify security risks, gaps, and missing controls.
• Assess findings against security policies, standards, methodologies, and frameworks.
• Document findings, conclusions, supporting evidence, and mitigation recommendations.
• Escalate risks when necessary and follow up on decisions and mitigation actions.
• Maintain communication with technical and business teams.
• Manage multiple reviews and establish priorities.