Cyber Security Specialist

About the role

The firm is looking for a Cyber Security Specialist to drive its security program toward maturity, align with the NIST Cybersecurity Framework, and protect critical assets across cloud, network, and endpoint environments. The role combines strategic governance with hands‑on operations, incident response, and security awareness.

Key responsibilities

• Assess current security posture against NIST CSF and CIS Controls, produce gap analyses and a prioritized remediation roadmap.
• Define and maintain security policies, standards, and a risk register; report residual risk and support cyber‑insurance attestations.
• Manage endpoint detection and response (EDR) tooling, tune detections, and coordinate incident response with internal teams and the managed security provider.
• Oversee vulnerability scanning, CVSS‑based prioritisation, patch cadence, and closure verification across servers, endpoints and network devices.
• Review and harden firewall rules, VPN configurations, and network segmentation; advance zero‑trust access initiatives.
• Govern identity and access management in Active Directory/Microsoft Entra ID, including MFA, conditional access, and privileged access management.
• Implement data loss prevention, email security (DMARC/DKIM/SPF), secure email gateway, and DNS/web filtering to mitigate business‑email compromise.
• Run security awareness training, simulated phishing campaigns and coach repeat clickers.

Required profile

• Proven experience conducting NIST CSF and CIS Controls assessments and leading remediation programs.
• Strong background in incident response, vulnerability management and security operations within a managed‑service environment.
• Excellent communication skills to translate technical risk into business language for leadership.
• Ability to work collaboratively with IT, network, and cloud teams and manage third‑party security providers.

Required skills

• NIST Cybersecurity Framework
• CIS Controls
• Endpoint Detection and Response (EDR) platforms
• CVSS scoring
• Azure and AWS cloud security
• Active Directory / Microsoft Entra ID
• Identity and Access Management (IAM) and Privileged Access Management (PAM)
• Data Loss Prevention (DLP) solutions
• DMARC, DKIM, SPF and secure email gateways
• Firewall, VPN and network segmentation
• Vulnerability scanning and patch management tools
• Security awareness and phishing simulation platforms