Technology Risk Associate

Job Summary

Key Responsibilities

• Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions.
• Review proposed technology solutions and architectures to ensure security requirements are incorporated by design.
• Perform threat modelling and security risk assessments for new technologies and business initiatives.
• Define and assess security baselines and configuration standards.
• Provide security recommendations for enterprise architecture and technology transformation initiatives.
• Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments.
• Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring.
• Support security governance for container environments.
• Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions.
• Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers.
• Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.
• Lead application security assessments throughout the software development lifecycle.

Required Skills & Qualifications

• Strong blend of cybersecurity risk management, security assurance, and technical security expertise.
• Ability to assess complex technology environments and engage effectively with business stakeholders, technology teams, project managers, third-party service providers, auditors, and regulatory authorities.
• Experience in conducting and overseeing cybersecurity risk assessments.
• Knowledge of evaluating the effectiveness of security controls.
• Ability to perform cybersecurity assurance and compliance reviews.
• Experience in monitoring technology and cyber risk exposure.
• Ability to support the remediation of identified vulnerabilities, control deficiencies, and emerging threats.
• Experience in contributing to the ongoing enhancement of cybersecurity governance, risk management, and regulatory compliance framework.