5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
Provide Remediation Recommendations: Develop and present remediation recommendations and roadmaps to clients, helping them to improve their overall security posture.
Security Operations & Incident Response: Monitor daily security alerts across cloud infrastructure and own the incident response lifecycle, from containment and forensic mitigation to reporting for senior leadership.
Build an automated agent red-teaming pipeline to continuously discover vulnerabilities, generate adversarial test cases, and harden defenses before production deployment.
Familiar with Agile development, CI/CD and DevSecOps practices, including tools such as GitLab, GitHub and Ansible, and the integration of automated security testing into CI/CD pipelines.
Ensure technology initiatives and controls comply with internal security policies, standards and governance requirements, proactively highlighting gaps and recommending remediation.
Provide consultation, evaluation, and implementation of security controls, including cross-border travel evaluations and pre-emptive checks against IT security policies.