Technology Risk Associate

Job Summary

Key Responsibilities

• Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions.
• Review proposed technology solutions and architectures to ensure security requirements are incorporated by design.
• Perform threat modelling and security risk assessments for new technologies and business initiatives.
• Define and assess security baselines and configuration standards.
• Provide security recommendations for enterprise architecture and technology transformation initiatives.
• Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments.
• Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring.
• Support security governance for container environments.
• Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions.
• Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers.
• Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.
• Lead application security assessments throughout the software development lifecycle.

Preferred Certifications

• OSCP - Offensive Security Certified Professional
• CEH - Certified Ethical Hacker
• CHFI - Computer Hacking Forensic Investigator
• CISSP - Certified Information Systems Security Professional
• CISM – Certified Information Security Manager

Educational Qualifications Required

• Bachelor or Master degree in Computer or IT or any related fields

Experience Requirements

• More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance
• Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards.
• Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities.
• Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, DevSecOps, vulnerability assessment, penetration testing, security operations and information security incident management.