Cybersecurity Specialist

Quick Facts

Hybrid role focused on technical cybersecurity assessments, vendor security and compliance reviews, and risk-based reporting.

Description

As a Cybersecurity Specialist, you will conduct technical security assessments for web and mobile applications, APIs, cloud services, technology platforms, business processes, and third-party solutions. You will evaluate authentication and authorization, session management, encryption, credentials and keys, logging, and secure configuration to identify risks and vulnerabilities, then document and present risk-based recommendations to technical and non-technical stakeholders. You will also review SOC reports, certificates, penetration test results, support security audits, and perform vendor security assessments aligned with recognized standards.

Responsibilities

• Perform technical security evaluations of web/mobile applications, APIs, cloud services, platforms, business processes, and third-party-delivered solutions
• Assess application security mechanisms: authentication/authorization, session management, encryption, credentials/keys, logging, and secure configuration
• Identify security risks, gaps, and improvement areas using risk analysis
• Create practical, risk-based recommendations considering operational requirements and business goals
• Document risk findings, conclusions, and decisions clearly and professionally
• Review evidence that security controls are implemented and evaluate their effectiveness
• Prepare assessment summaries, threat analyses, and remediation action recommendations for management
• Present results to both technical and non-technical audiences
• Support reporting on assessments, identified threats, remediation actions, and security trends
• Review vendor security questionnaires, SOC reports, certificates, penetration testing reports, and related security documentation
• Evaluate security posture of prospective/current vendors, SaaS providers, cloud service providers, and technology partners
• Collaborate with Procurement and Legal, business teams, and vendors to address security topics and define residual risk level
• Support internal/external audits and respond to customer security and regulatory control inquiries
• Maintain up-to-date knowledge of standards and requirements such as ISO 27001, NIST CSF, NIST 800-53, CIS Controls, PCI DSS, NIS2, OWASP (and others as applicable)
• Contribute to continuous improvement of assessment processes, templates, standards, and reporting practices

Requirements

• Bachelor’s degree in cybersecurity, information security, information systems, risk management, auditing, IT, or a related field (or equivalent experience)
• At least 5 years of experience in cybersecurity, IT risk management, IT audit, compliance, vendor risk management, security assessments, or related areas
• Independent experience performing security assessments and producing detailed, risk-based findings and recommendations
• Experience assessing security of architecture and infrastructure and reviewing vendor documentation, SOC reports, audit evidence, remediation plans, and compliance proof
• Experience collaborating with corporate technologies, cloud platforms, and external service providers
• At least one of: CISSP, CISA, CRISC, or GIAC (additional certifications are a plus)
• Experience conducting vendor risk assessments or third-party security reviews
• Experience supporting security audits, controls, or security assurance activities
• Knowledge of cloud security, application security, IAM, and data protection
• Hands-on experience with GRC platforms, workflow management tools, ticketing systems, and compliance documentation management

Benefits

• Comprehensive compensation package designed to stay competitive, support employee wellbeing, and recognize individual performance
• Pay-for-performance approach rewarding individual impact and achievements
• Potential annual bonuses and motivation-related benefits (depending on role and location)
• Health and wellbeing benefits
• Paid time off
• Retirement programs and insurance protection
• Additional local or statutory benefits (details discussed during recruiting)