Cyber Security Specialist

Security Engineering & Operations

• Design, implement, and maintain cybersecurity controls and security architecture.
• Evaluate and strengthen security controls across networks, cloud platforms, applications, and infrastructure.
• Support vulnerability management, risk remediation, and security improvement initiatives.
• Partner with IT teams to ensure secure system deployment and configuration.
• Contribute to incident response planning, security monitoring, and threat mitigation activities.

Governance, Risk & Compliance (GRC)

• Lead cybersecurity governance activities aligned with organizational objectives.
• Develop, maintain, and enforce security policies, standards, procedures, and guidelines.
• Conduct security risk assessments and manage remediation activities.
• Ensure compliance with relevant regulations, standards, and frameworks, including:
• ISO 27001
• NIST Cybersecurity Framework
• SOC 2
• PCI-DSS
• HIPAA (where applicable)
• GDPR and privacy regulations (where applicable)

Audit & Regulatory Management

• Coordinate internal and external cybersecurity audits.
• Serve as the primary cybersecurity liaison for auditors, regulators, and compliance assessors.
• Track audit findings and ensure timely remediation of identified gaps.
• Produce evidence, reports, and documentation supporting compliance requirements.
• Monitor evolving regulatory requirements and recommend updates to security programs.

Project Management

• Lead cross-functional cybersecurity projects from initiation through completion.
• Manage project plans, timelines, risks, dependencies, and stakeholder communications.
• Coordinate security requirements for enterprise technology initiatives.
• Ensure projects meet budget, timeline, and compliance objectives.

Collaboration & Communication

• Build strong partnerships across IT, Legal, Risk, Privacy, Operations, and business functions.
• Communicate security risks, recommendations, and compliance status to technical and non-technical stakeholders.
• Facilitate security awareness and education efforts across the organization.
• Influence decision-making through effective communication and relationship management.

We are seeking an experienced Cyber Security Specialist to lead and support security engineering, governance, risk, compliance, audit, and regulatory initiatives across the organization. This role requires a strong technical security background combined with expertise in cybersecurity frameworks, risk management, regulatory compliance, and stakeholder engagement.

The ideal candidate will possess exceptional communication skills, a collaborative mindset, strong project management capabilities, and a proven ability to work effectively with technical teams, business leaders, auditors, regulators, and external partners.

Required Certification: CISSP (Certified Information Systems Security Professional), * CISSP certification (required).

• Bachelor’’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 5+ years of experience in cybersecurity, information security, risk management, compliance, or related disciplines.
• Demonstrated experience in both technical security engineering and compliance/governance functions.
• Experience supporting audits, regulatory reviews, and compliance assessments.
• Strong understanding of cybersecurity frameworks and standards.
• Proven project management experience leading cross-functional initiatives.