Cyber Security Engineer

Key Responsibilities:

• Execute internal control testing across ISO 27001, SOC 1, SOC 2 controls.
• Review network architecture, firewall policies, segmentation, and access controls.
• Audit cloud environments (AWS/Azure/GCP) for security misconfigurations, IAM controls, and logging/monitoring coverage.
• Lead audit preparation, walkthroughs, and evidence submission with external auditors.
• Validate remediation actions and measure control effectiveness.
• Maintain audit documentation, workflows, and security compliance repositories.

Required Qualifications & Skills:

• Bachelors degree in information security, Information Systems, Computer Science, or related field.
• 24 years of hands-on experience in cybersecurity audits and internal control testing related to ISO 27001, SOC 1, and SOC 2 frameworks.
• Strong understanding of internal audit principles, risk management, and compliance methodologies.
• Excellent takeholder management and interpersonal communication skills.
• Strong documentation and reporting capabilities with attention to detail.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Preferred Certifications (Good to Have):

• ISO 27001 Lead Auditor/Implementer
• CISA, CISM, or similar industry certifications
• Familiarity with NIST, COBIT, or other relevant security frameworks