Cyber Security Specialist

About the role

We are looking for a Cyber Security Specialist to lead and mature our security program. The role will drive governance, risk management, and operational security across the firm, ensuring alignment with industry frameworks and continuous improvement.

Key responsibilities

• Assess current security posture against NIST CSF and CIS Controls, produce gap analysis and remediation roadmap.
• Establish baselines, track KPIs/KRIs, maintain policies, standards and procedures, and keep a risk register.
• Manage relationships with managed security providers, conduct vendor risk reviews and support cyber‑insurance attestations.
• Oversee endpoint detection and response (EDR) tuning, alert triage, incident response coordination and tabletop exercises.
• Run vulnerability management lifecycle, prioritize using CVSS, and partner on patch cadence across servers, endpoints and network devices.
• Review and harden firewalls, VPNs, network segmentation, and support zero‑trust initiatives.
• Govern cloud security in Azure and AWS, including least‑privilege IAM, secrets management and cloud‑native controls.
• Implement MFA, conditional access, privileged access management, and identity lifecycle in Active Directory/Microsoft Entra ID.
• Deploy data loss prevention, classify and protect data, and manage email security stack (DMARC, DKIM, SPF, anti‑phishing).
• Run security awareness training, simulated phishing campaigns and act as internal security advocate.

Required profile

• Several years of hands‑on experience in information security, governance and risk management.
• Proven ability to design, implement and mature security programs aligned with NIST CSF and CIS Controls.
• Strong background in security operations, incident response and vulnerability management.
• Experience securing cloud environments (Azure, AWS) and managing IAM and privileged access.
• Excellent communication skills to convey risk to leadership and drive security awareness.

Required skills

• NIST Cybersecurity Framework
• CIS Controls
• Endpoint Detection & Response (EDR)
• CVSS scoring
• Azure
• AWS
• Identity and Access Management (IAM)
• Active Directory
• Microsoft Entra ID
• Data Loss Prevention (DLP)
• DMARC, DKIM, SPF