REQUIRED QUALIFICATIONS:

 Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience.
 3+ years of experience in information security, risk management, or security compliance roles.
 Strong knowledge of security risk assessment methodologies, security controls, and compliance frameworks.
 Experience with security standards such as ISO 27001, NIST, PCI DSS, GDPR, etc.
 Familiarity with GRC (Governance, Risk, and Compliance) tools and processes.
 Excellent analytical, problem-solving, and critical-thinking skills.
 Strong written and verbal communication skills, with the ability to present complex
information clearly.

PREFERRED QUALIFICATIONS:

 Security certifications such as CISA, CISSP, CRISC, ISO 27001 Lead
Auditor/Implementer, or equivalent.
 Experience with risk management tools and security auditing.
 Knowledge of cloud security and data protection regulations.
 Understanding of business continuity and disaster recovery principles.

ABOUT THE ROLE:

We are seeking a detail-oriented and analytical Security Assurance Officer to join our Information Security team. The Security Assurance Officer will be responsible for evaluating and ensuring the effectiveness of security controls, risk management practices, and compliance with regulatory requirements across the organization.

KEY RESPONSIBILITIES:

 Conduct security risk assessments to identify vulnerabilities and potential threats to information assets.
 Evaluate the effectiveness of security controls through audits, assessments, and
continuous monitoring.
 Ensure compliance with internal security policies, industry standards (ISO 27001,
NIST, etc.), and regulatory requirements.
 Develop and maintain security assurance frameworks, methodologies, and reporting structures.
 Provide recommendations for risk mitigation and support remediation efforts.
 Collaborate with internal teams to address security risks, gaps, and compliance
issues.
 Assist in the development and implementation of security policies, standards, and
procedures.
 Monitor security incidents and perform root cause analysis to prevent future
occurrences.
 Support third-party risk assessments and vendor security reviews.
 Prepare detailed reports and presentations for management, highlighting security
risks and assurance activities.