Security Risk Specialist

Description:

• The mandatetargets a liaison profile between the cybersecurity function and thedecision-makers of a business portfolio, rather than an operational technicalexecution role.
  
• The wordingof the mandate—tactical driver, guiding investments, ensuring consistencybetween security requirements and initiatives, sustainability ofoperations—positions the role as strategic support integrated into theportfolio, rather than a SOC analyst or security architect position.
  
• Therequired experience combines a general IT foundation of 8 to 12 years with atleast 5 years of focused specialization in cybersecurity, technology riskmanagement, or security governance, which sets this profile apart from a puretechnical specialist.
  
• Asignificant portion of the qualifications focuses on simplification,influencing without hierarchical authority, and building trusting relationshipswith business partners, which underscores the advisory aspect of the rolebeyond technical expertise.
  

Requirements

Required:

• 8 to 12 years of experience in information technology,including a minimum of 5 years in cybersecurity, technology risk management, orsecurity governance
  
• Experience in risk analysis and integrating cybersecurityinto business processes
  
• Significant experience supporting projects, programs, ortransformation initiatives
  
• Knowledge of risk management methods and cybersecuritycontrols
  

Desired:

• Ability to identify cybersecurity risks in diverse businessand technology contexts
  
• Ability to analyze potential impacts on operations, data,compliance, and business objectives
  
• Ability to recommend balanced solutions between businessneeds and an acceptable level of risk
  
• Ability to manage multiple files, cases, or initiativessimultaneously in complex transformation environments
  

Asset:

• Ability to communicate complex technical concepts in a clearand understandable manner to non-technical audiences
  
• Influencing skills without formal authority and ability toinfluence multidisciplinary stakeholders
  
• Ability to build trusted relationships with businesspartners