Job Description & How to Apply Below
Mission
Our client is looking for a Security Officer to support the security assessment of critical business and IT initiatives.
The objective is to identify, assess, and mitigate cyber and IT risks from the early stages of project delivery, ensuring that security, compliance, and resilience requirements are integrated into solution design and implementation.
This role requires a strong combination of technical security expertise, risk management capabilities, and stakeholder engagement skills.
Key responsibilities
Technical risk assessment:
Analyze complex application and infrastructure architectures to identify security risks and vulnerabilities.
Review data flows, integrations, APIs, cloud environments, and Micro Services architectures.
Apply recognized methodologies such as OWASP Risk Rating and ISO 27005.
Security governance & compliance:
Ensure alignment with internal security policies and applicable regulations.
Support compliance initiatives related to GDPR, NIS2, and industry security frameworks.
Participate in risk acceptance and remediation processes.
Architecture & design reviews:
Perform security reviews during project design phases.
Challenge architectural decisions from a security perspective.
Identify security gaps before production deployment.
Third-party risk management:
Assess security aspects of external vendors and service providers.
Review contracts and technical security documentation.
Stakeholder management:
Collaborate closely with Architects, Dev Ops Engineers, Product Owners, and Project Managers.
Facilitate workshops and security review sessions.
Translate technical risks into business-oriented recommendations.
Reporting:
Produce clear and actionable risk assessment reports.
Present findings and recommendations to management and governance bodies.
Required skills & experience
Security & risk frameworks:
Strong expertise with:
ISO 27001 / 27002 / 27005
NIST Cybersecurity Framework
OWASP methodologies
NIS2 Directive
Technical expertise:
Experience reviewing modern application architectures.
Strong understanding of:
APIs
Micro Services
Cloud environments (GCP preferred)
Security architecture principles
Professional experience:
Minimum 5 years of experience in Cyber Security.
Proven background in GRC, Security Architecture, Risk Management, or related security functions.
Soft skills:
Strong analytical and investigative mindset.
Ability to identify hidden risks and challenge assumptions.
Excellent communication skills.
Ability to explain complex technical topics to non-technical stakeholders.
Languages:
Professional fluency in English.
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
×