Practice: Software and Platform, Industry Consulting, Global Network I Areas of Work: IT Security & Governance | Level: Manager 

Position Overview: 

As an IT Security Analyst/Consultant specialized in the Software and Platforms industry, you will play a pivotal role in helping our clients enhance their business operations. You'll collaborate closely with clients, business stakeholders, and technical teams to help client organizations look deeper into the security of their native environment and improve and embed controls across the company, aligning with industry best practices. 

Key Responsibilities: 

• 7-11 years of strong industry experience in Cybersecurity Strategy, Risk & Regulatory Technology (RiskTech, RegTech). 

• Should have experience in implementation and assessments of Cybersecurity frameworks (NIST CSF, COBIT) and regulatory guidelines (e.g. OSFI Technology and Cyber Risk Management (B-13) / Third-Party Risk Management Guideline (B-10)). 

• Must have experience in controls and gap assessments based on industry standards, such as, PCI, NIST 800-53, CIS - CSC and compliance standards/frameworks like ISO 27001/27002, NIST, COBIT, SOX, GLBA, SSAE16/SOC 2, etc. 

• Must have experience and proficient in cyber risk management/control design and testing/ Cybersecurity maturity assessments/ Third Party Risk Management/Supplier or Vendor Risk assessments/ etc 

• Demonstrates knowledge in developing cybersecurity strategies, roadmaps, target operating models, cybersecurity governance models, cybersecurity architecture, cyber policies/standards/procedures and Board presentations/reports/material. 

• Develop and tailor approaches, methods, and tools to support clients cyber risk programs and initiatives. 

• Strategically drive the development and execution of risk assessments and mitigation plans to enhance the client's ability to identify, evaluate, prioritize, and mitigate risks.