Core Responsibilities:
· Perform risk-based cybersecurity assessments using the NIST Cybersecurity Framework
· Conduct Threat Modeling to identify and evaluate cybersecurity risks
· Review vulnerability information and assess risk impact, exploitability, and residual risk
· Maintain and update vulnerability risk registers and risk treatment documentation
· Evaluate the adequacy of existing security controls (e.g., access controls, encryption, vulnerability management, logging) as a part of assessments
· Document assessment results clearly and support risk-based decision making
· Collaborate with system owners and stakeholders to gather evidence and clarify system context
· Support management in the continuous improvement of cybersecurity strategies, policies, and standards to safeguard company information, systems, and technology assets.
Skills & Requirements:
· Proven experience with a wide range of information security processes and principles, including but not limited to risk assessments, threat modeling, risk analysis, and defense in depth.
· Practical understanding of NIST CSF, NIS2 EU Directive and risk-based security principles
· Strong capability in identifying, analyzing, and mitigating cybersecurity threats using a risk driven approach
· Solid and broad cybersecurity background, including strong knowledge of regulatory requirements and industry best practices
· Strong analytical, communication and documentation skills, with ability to collaborate effectively with diverse teams.
· Self-driven and proactive, with a demonstrated ability to take initiative and work independently
· Experience using Microsoft Office 365 tools, including Excel, PowerPoint, Word, and Power BI
Education/ Certifications:
· Master’s degree in Cybersecurity (preferred) / Master’s degree in computer science or related technical discipline (second preference) Bachelor’s degree in cybersecurity or related field (third preference)
· CompTIA Security+ (preferred / nice to have)
· Other relevant cybersecurity certifications related to risk management or frameworks (optional)
Top 5 skills/requirements –
· Performing cybersecurity risk-based assessments.
· Hands-on past work experience on NIST Framework.
· Risk based cybersecurity Threat identification and mitigation activities.
· Strong Cybersecurity background
Confirm interview preferences : First Round: Video call / Second Round: Onsite (required).