Enterprise Cyber Advisor

Responsibilities

• Cybersecurity Advisory & Guidance: Serve as a subject matter expert, providing policy and risk-based consultation to enterprise customers, ensuring consistent adherence to regulatory requirements and best practices across all operations.
• Cybersecurity Project Management: Manage and drive critical cybersecurity projects from inception to completion, focusing on initiatives that improve internal customer experience by delivering user-centric security solutions and streamlining security processes. This includes defining project scope, coordinating resources, tracking progress, and ensuring successful delivery.
• OSP Compliance Support: Act as a dedicated resource for Outside Service Provider (OSP) compliance, guiding business owners on company policy requirements and assisting in assessing the security posture of third-party vendors to minimize potential disruptions.
• GRC Component Assessments: Conduct high-risk Application and Infrastructure Governance, Risk, and Compliance (GRC) component assessments, identifying potential vulnerabilities, ensuring control implementation, and recommending mitigation strategies across various technologies.
• Security Awareness: Support enterprise-level cybersecurity awareness initiatives, strengthening employee security awareness and empowering them as the first line of defense.
• Vulnerability Management: Assist teams in triaging, analyzing, and addressing security vulnerabilities effectively.
  

Qualifications

• Bachelor's degree in a relevant field (e.g., Computer Science, Cybersecurity, Software Engineering, Information Security) or an equivalent combination of education, training, and experience.
• Minimum of 2 years of professional experience in one or more of the following technical disciplines:
• Third-party Risk Assessment
• Vulnerabilities Assessments
• Cybersecurity Consultation
• Cybersecurity Auditing
• Software Development and Coding (with a security focus)
• Application Security
• DevSecOps Methodologies
• Identity and Access Management (IAM)
• Cloud Security
• Security Operations and Incident Response
• Alternatively: Minimum of 2-3 years of professional experience in IT (e.g., application development, infrastructure management), coupled with a strong desire and demonstrated aptitude for a career in cybersecurity.
  

• Proficiency with cybersecurity frameworks and industry standards (e.g., NIST CSF, ISO 27001/2, OWASP).
• Experience with Threat Modeling and IT Risk Assessment methodologies.
• Knowledge of best practices for IAM flows and grant types, including OAuth2, OIDC, and SAML standards.
• Experience with API security best practices to protect sensitive data and services.
• Familiarity with cryptographic algorithms and functions for building secure solutions.
• Understanding of common security flaws and effective remediation strategies (e.g., OWASP Top 10).
• Knowledge of DevSecOps principles, agile methodologies, and security policies.