Cyber Security Engineer

Key Responsibilities

1. Control Lifecycle Management

   :

• Lead the

  design

  ,

  implementation

  , and

  validation

  of

  IT controls

  .
• Ensure

  operational effectiveness testing

  to validate the performance of controls throughout their lifecycle.

1. Third-Party Risk and Control Assessments

   :

• Perform thorough assessments of third-party risks and controls to ensure compliance and identify vulnerabilities in third-party services.

1. Stakeholder Management

   :

• Collaborate with senior stakeholders across various teams and departments, managing relationships and effectively communicating complex IT risk and control topics.
• Educate and explain IT risks and controls to non-technical and technical stakeholders, fostering understanding and alignment.

1. Meeting Deadlines and KPIs

   :

• Manage time effectively under pressure, meeting deadlines and achieving KPIs for completion of control testing, assessments, and related tasks.

1. Risk and Control Testing

   :

• Provide

  SME guidance

  in the

  design

  and

  enhancement

  of technology controls for IT colleagues.
• Conduct

  IT risk assessments

  , reviewing and evaluating control designs, implementation, and operational effectiveness.

1. Collaborating with Risk Teams

   :

• Work with colleagues in

  technology-risk-focused teams

  , contributing to

  control testing conclusions

  and providing insights into control weaknesses.

1. Proactive Issue Resolution

   :

• Address and resolve technology control concerns, providing guidance on mitigating risks and closing gaps in the control environment.

1. Workshops and Documentation

   :

• Facilitate

  workshops

  related to

  technology controls

  and associated risks, ensuring clear and concise documentation of findings and recommendations.

1. Knowledge and Compliance

   :

• Leverage your knowledge of

  regulations

  such as

  GDPR

  ,

  DORA

  ,

  ISF Standard of Good Practice

  ,

  NIST CSF

  ,

  PCI DSS

  , and

  PSD2

  to assess controls and ensure compliance with industry standards.

1. Technology Risk Education

   :

• Educate stakeholders on

  IT risk management

  , ensuring that they understand the implications of technology risks and the role of controls in mitigation.

Qualifications

• Experience

  : Minimum

  5+ years

  of experience in

  IT controls management

  ,

  risk assessments

  , and

  control lifecycle management

  .

• Certifications

  : Relevant certifications such as

  ISO27001

  ,

  CRISC

  ,

  CISM

  ,

  CISA

  ,

  CISSP

  .

• Industry Knowledge

  : Familiarity with

  financial services regulations

  , including

  GDPR

  ,

  DORA

  ,

  NIST CSF

  ,

  PCI DSS

  , and

  PSD2

  .

• Communication

  : Business-level fluency in

  spoken and written English

  , with excellent communication skills to manage stakeholders and explain complex concepts.

• Education

  :

  IT-related academic background

  , such as

  information systems

  ,

  network design

  , or

  cloud infrastructure

  .