Cybersecurity Professional

• Conduct cybersecurity risk assessments for technology, business, and operational initiatives
• Analyze threats, vulnerabilities, and control effectiveness to determine residual risk
• Maintain and update cybersecurity risk registers
• Evaluate risks against approved risk appetite and risk tolerance thresholds
• Track risk mitigation and remediation activities through closure
• Support the Cybersecurity Risk and Control Framework (CRCF)
• Challenge the completeness and accuracy of risk assessments and mitigation plans
• Monitor adherence to cybersecurity policies, standards, and control requirements
• Assist with exception and risk acceptance reviews
• Support cybersecurity governance forums and reporting activities
• Assist with internal and external cybersecurity audits
• Coordinate evidence collection and remediation tracking
• Assess compliance with internal cybersecurity standards and regulatory requirements
• Support control assessments and gap analyses
• Develop risk metrics, dashboards, and management reports
• Prepare materials for management and governance reviews
• Escalate significant cybersecurity risk exposures and emerging trends
• Support enterprise cybersecurity reporting activities
• Collaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams
• Provide guidance on cybersecurity risk management processes and requirements
• Facilitate risk reviews and risk treatment discussions with stakeholders
• Promote cybersecurity awareness and risk-informed decision making

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Risk Management, or related discipline
• 10+ years of experience in cybersecurity, risk management, audit, compliance, or information security
• Knowledge of cybersecurity risk management methodologies and control frameworks
• Ability to analyze complex technical and business risks
• Strong written, presentation, and communication skills
• Knowledge of common cybersecurity frameworks and regulations (e.g., NIST, ISO 27001, GDPR)
• Excellent analytical and problem-solving skills
• Relevant certifications such as CompTIA Security+ or CISSP are a plus

• Industry-leading benefits, support, and services supporting holistic health and wellbeing
• Flexible arrangements that work for you (role and location dependent)
• Autonomy, freedom, and ownership
• Inclusive culture based on mutual respect and merit-based systems
• Reasonable accommodations during the recruitment process