Cybersecurity Risk and Compliance Specialist

About the role

The Cybersecurity Risk and Compliance Specialist will lead assessments of technology environments, solutions and third‑party services to identify security gaps, vulnerabilities and compliance issues. The role supports senior leadership by delivering clear risk insights and actionable mitigation strategies.

Key responsibilities

• Conduct threat, risk, cyber‑maturity and compliance assessments across enterprise applications, cloud platforms, data pipelines, APIs and AI‑enabled solutions.
• Evaluate security policies, governance practices and technical controls against frameworks such as NIST CSF, NIST 800‑30, ISO 27001, NIST AI RMF and OWASP GenAI guidance.
• Identify cyber threats, attack vectors and AI‑related risks (e.g., prompt injection, model poisoning) that could impact business operations.
• Recommend risk mitigation measures, improve security architecture and align controls with business objectives.
• Prepare detailed assessment reports, executive summaries and present findings to senior leadership and technical teams.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science or related field.
• 3‑7 years of experience in cybersecurity audits, risk assessments and security risk management.
• Strong knowledge of industry frameworks (NIST, ISO, SOC 2, PCI DSS, CIS Controls, OWASP).
• Hands‑on experience with security risk assessment tools and methodologies.
• Excellent analytical, problem‑solving and communication skills.

Required skills

• NIST CSF, NIST 800‑30, NIST AI RMF, ISO 27001, SOC 2, PCI DSS, CIS Controls, OWASP LLM/GenAI guidance
• Cloud security (AWS, Azure, GCP)
• Network security, endpoint security, encryption, access management
• Application security, API/integration security, data security
• Security risk assessment tools and methodologies