Tech Stack
CloudCyber Security
About the role
- Lead threat modelling assessment to establish threat scenarios, actors and vectors.
- Develop technical methodology to ensure high technological standards in risk analysis teams
- Mentor junior risk analysts during engagements to upskill them
- Perform comprehensive cybersecurity risk assessments to identify security gaps and recommend actionable remediation and mitigations.
- Provide expert security consulting, offering insights and guidance to customers on improving their overall cybersecurity posture.
- Create detailed technical reports and documentation outlining identified threats, potential impact, risk assessment findings, and recommended remediation steps.
- Engage relevant stakeholders.
- Stay current with emerging threats, vulnerabilities, and industry trends, continuously enhancing the organization's risk analysis capabilities.
Requirements
- Minimum of 8 years of experience in cybersecurity, with a focus on risk assessments, consultancy and GRC.
- Proven track record in leading and conducting security consultancy, including customer engagement, team management, and business development.
- Strong understanding of cybersecurity principles, frameworks, and best practices.
- Experience with industry standard threat modelling methodologies, such as OWASP, NIST, MITRE ATT&CK, STRIDE-LM.
- Good technical understanding of cloud platforms and technology.
- Excellent communication and interpersonal skills, with the ability to effectively interact with customers, team members, and senior management.
- Some prior experience in VAPT or red teaming will be a plus.
- Relevant certifications such as CISSP, CISSP-ISAAP, OSCP, or similar are highly desirable.
- A wholly-owned subsidiary of GovTech.
- We promote a learning culture and encourage you to grow and learn.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
cybersecurityrisk assessmentssecurity consultancythreat modellingVAPTred teamingcloud platformstechnical methodologyrisk analysis
Soft skills
mentoringcommunicationinterpersonal skillsstakeholder engagementteam managementbusiness development
Certifications
CISSPCISSP-ISAAPOSCP