Cybersecurity Specialist

About the role

The Cybersecurity Specialist will protect the organization’s information assets by identifying, assessing, and mitigating security risks across hardware, software, and cloud environments. You will work closely with infrastructure, application, and third‑party teams to ensure robust security controls and incident response capabilities.

Key responsibilities

• Perform security risk assessments, develop treatment plans, and maintain risk registers.
• Conduct business impact analyses and oversee security control testing.
• Review vulnerability assessment, penetration testing, and secure code review reports and drive remediation.
• Run regular vulnerability scans, penetration tests, and risk assessments.
• Research emerging threats, CVEs, and attacker techniques to update defenses.
• Collaborate with infrastructure, end‑user support, and third‑party vendors to close gaps.
• Configure, deploy, and maintain firewalls, antivirus, DLP, PAM, WAF and related tools.
• Lead employee security awareness programs, including phishing simulations.
• Develop and maintain cybersecurity policies, standards, and frameworks aligned with business goals.
• Support internal and external audits (ISO 27001, NIST, OWASP) and act as primary point of contact for security alerts.
• Perform log analysis, investigate incidents, and coordinate containment and remediation.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• Professional certifications such as CISSP, CISM or CISA are preferred.
• Minimum 3 years of experience in cybersecurity, governance, risk or compliance.
• Proven experience with security technologies and incident response.

Required skills

• Firewalls
• Intrusion detection/prevention systems (IDS/IPS)
• Data encryption
• Antivirus solutions
• Data loss prevention (DLP)
• Privileged Access Management (PAM)
• Web Application Firewall (WAF)
• Vulnerability scanning tools (e.g., Tenable)
• Penetration testing
• Log analysis and security incident response
• Security policy development
• Knowledge of ISO 27001, NIST and OWASP frameworks