Job Description

• Lead or assist in Information Security audits and Risk Management initiatives using frameworks such as PCI DSS, ISO 27001, NIST, COBIT, and others, including scoping, evaluation, testing, reporting, and issue follow-up.
• Conduct audits and risk assessments across various processes, technologies, and platforms, including UNIX, Windows, DBMS (SQL, Oracle, DB2), Active Directory, AS/400, and network infrastructures.
• Identify technology risks and recommend appropriate controls based on risk level, business requirements, and implementation feasibility.
• Advise clients on process and control improvements, providing actionable recommendations.
• Prepare and deliver clear, concise, and effective communications—both written and verbal—to stakeholders at all levels of management.

Job Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, IT, Systems Engineering, or a related field.
• Minimum 2 years of experience in Information Security auditing, risk management, or related research.
• Cybersecurity certifications such as CEH, OSCP, GPEN, CPTE, Lead Auditor, or equivalent are a plus.
• Hands-on knowledge and experience in Windows and Linux environments is advantageous.
• Excellent communication, organizational, multitasking skills, and strong attention to detail.
• Ability to manage multiple tasks and projects calmly under pressure.
• Strong passion for Cybersecurity and staying current with emerging threats and trends.

Skills