Description

You will implement and continuously improve cybersecurity across the firm, managing security incidents and ensuring IT system compliance with internal and external policies. You will evaluate security capabilities, perform risk assessments, and propose mitigation strategies for internal applications.

This role is on-site.

Responsibilities

• Implement cybersecurity measures and enhance security capabilities across the organization.
• Perform risk assessments on internal applications and consult stakeholders on residual risks and mitigation.
• Ensure IT system compliance with IT, quality, information security, legal, and data privacy regulations.
• Define security models for application and infrastructure projects, promoting proactive security measures.
• Provide cybersecurity training to colleagues and act as the interface between business analytical demands and IT implementation.

Required Skills

• 5-6+ years of IT experience, specifically in Cybersecurity, IT Compliance, or security reviews/audits.
• Subject matter expertise in application security best practices, including security protocols, cryptography, authentication, authorization, and OS/database hardening.
• Experience determining security requirements using a risk-based approach, describing data flows, and defining security controls.
• Strong knowledge of ITIL, IT Service Management (ITSM), and Agile methodologies.
• Understanding of IT system architecture, network security basics, and the Software Development Life Cycle (SDLC).
• Familiarity with multi-cloud platforms (AWS, Azure, GCP) and cloud service models (IaaS, PaaS, SaaS).

Preferred Skills

• CISSP, ISO 27001 Lead Auditor, or CompTIA Security+ certifications.
• Experience in project management within cross-functional teams.

Key Skills

Education

Bachelor's degree