Information Security Risk Assessor

A leading financial organization is seeking an Information Security Risk Assessor to conduct risk assessments.

Responsibilities:

• Perform risk assessments for the organization’s systems.
• Identify vulnerabilities in both existing systems and systems in the process of being implemented.
• Review system hardening against accepted security standards.
• Conduct regulatory reviews in accordance with financial industry regulations.
• Evaluate the effectiveness of compensating controls.
• Provide recommendations for mitigating identified vulnerabilities.
• Collaborate with technical teams to ensure remediation of weaknesses.
• Work as part of a professional Purple Team setup.

Requirements:

• At least 2 years of experience performing risk assessments with an emphasis on infrastructure.
• Familiarity with risk assessment methodologies.
• Knowledge of hardening standards across various system types.
• Understanding of networking and operating systems.
• Experience in configuring and hardening cloud environments, with a focus on Azure and AWS.
• Familiarity with development infrastructure (CI/CD, Docker, Kubernetes, etc.) – advantage.