Description

• Solid experience in risk and control assessments, particularly in cyber security, either within internal audit or a control testing function.
• Hands-on knowledge in areas such as:
  • Data security and cryptography
  • Network and system configuration
  • Cyber incident response
  • Threat and vulnerability management
  • Identity and access management
  • Data loss prevention
  • Cyber resilience strategies
• Familiarity with emerging technologies and the evolving landscape of cyber threats.
• Relevant certifications like CISA, CISM, CISSP, or a technical graduate degree.
• Understanding of applicable regulations and compliance standards.
• Practical experience with cybersecurity frameworks like NIST, CIS, or ISO.
• Strong grasp of threat analysis models like the Cyber Kill Chain and MITRE ATT&CK, as well as threat modelling techniques.
• Deep technical knowledge of cloud platforms (AWS, Azure), including potential security gaps such as misconfigurations, container vulnerabilities (Kubernetes/Docker), and serverless risks.