Sr IT Engineer,Security

Responsibilities

• 7+ years of relevant experience in cybersecurity, cybersecurity compliance, security assurance, technology risk, or security control assessment.
• Hands-on experience assessing technical cybersecurity controls alongside reviewing policies, procedures, or audit documentation.
• Demonstrate experience assessing organizations against UK Cyber Essentials Plus, CIS Controls, NIST CSF and/or NIST SP 800-series requirements.
• Strong understanding of vulnerability management, patch management, endpoint security, IAM/PAM, MFA, network security, secure configuration, logging/monitoring, incident response, encryption, and cloud security controls.
• Ability to review security configurations, vulnerability reports, security dashboards, architecture diagrams, access-control evidence, and other technical artifacts to determine whether security controls are effectively implemented.
• Experience conducting cybersecurity gap assessments, control maturity assessments, risk assessments, remediation tracking, and certification-readiness activities.
• Ability to engage effectively with SOC, IAM, Network, Cloud, Infrastructure, Endpoint, Vulnerability Management, and Security Engineering teams.
• Experience translating technical vulnerabilities and control deficiencies into business risk and actionable remediation requirements.
• Experience with ISO 27001, PCI DSS, TISAX, SOC 2, SOX, or similar assurance frameworks would be advantageous.
• Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security+, ISO 27001 Lead Auditor/Implementer, or equivalent are preferred.
• Excellent verbal and written communication skills and the ability to interact professionally and fluently with a diverse group
• Able to present information clearly, concisely, accurately and in a manner that promotes understanding, both in writing and verbally
• Ability and willingness to research unfamiliar information
• Assist in evolving team processes and driving continuous improvement by continuously seeking out and applying feedback.
• Can-do attitude and ability to deliver under tight timeline and high pressure

Qualifications

• Bachelors or Masters Degree or University Degree or equivalent in IT, Business Informatics or related fields
• Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security+, ISO 27001 Lead Auditor/Implementer, or equivalent are preferred.
• Strong presentation and communication skills
• Understanding of the definition, implementation and assessment of IT and business controls
• Ability to work independently, willingness to constantly learn and stay on top of the ever-changing landscape of security & compliance requirements

• 7+ years of relevant experience in cybersecurity, cybersecurity compliance, security assurance, technology risk, or security control assessment.
• Hands-on experience assessing technical cybersecurity controls alongside reviewing policies, procedures, or audit documentation.
• Demonstrate experience assessing organizations against UK Cyber Essentials Plus, CIS Controls, NIST CSF and/or NIST SP 800-series requirements.
• Strong understanding of vulnerability management, patch management, endpoint security, IAM/PAM, MFA, network security, secure configuration, logging/monitoring, incident response, encryption, and cloud security controls.
• Ability to review security configurations, vulnerability reports, security dashboards, architecture diagrams, access-control evidence, and other technical artifacts to determine whether security controls are effectively implemented.
• Experience conducting cybersecurity gap assessments, control maturity assessments, risk assessments, remediation tracking, and certification-readiness activities.
• Ability to engage effectively with SOC, IAM, Network, Cloud, Infrastructure, Endpoint, Vulnerability Management, and Security Engineering teams.
• Experience translating technical vulnerabilities and control deficiencies into business risk and actionable remediation requirements.
• Experience with ISO 27001, PCI DSS, TISAX, SOC 2, SOX, or similar assurance frameworks would be advantageous.
• Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security+, ISO 27001 Lead Auditor/Implementer, or equivalent are preferred.
• Excellent verbal and written communication skills and the ability to interact professionally and fluently with a diverse group
• Able to present information clearly, concisely, accurately and in a manner that promotes understanding, both in writing and verbally
• Ability and willingness to research unfamiliar information
• Assist in evolving team processes and driving continuous improvement by continuously seeking out and applying feedback.
• Can-do attitude and ability to deliver under tight timeline and high pressure

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.