Cybersecurity Risk Officer

About the Role

We're looking for a Cybersecurity Risk Officer to strengthen our organization's security posture and ensure robust protection against evolving cyber threats. You'll assess and manage cybersecurity risks, oversee third-party security, and support business continuity and incident response efforts.

Key Responsibilities

• Implement and maintain cybersecurity risk management frameworks and policies.
• Conduct vulnerability scans, penetration testing, and ongoing risk assessments.
• Maintain and update the cybersecurity risk register and track remediation efforts.
• Manage risk acceptance and exception processes, and report key risk indicators (KRIs).
• Assess and monitor third-party vendors for security and regulatory compliance (ISO 27001, SOC 2, GDPR, DPA2012).
• Ensure cybersecurity controls are integrated into business continuity and disaster recovery (BC/DR) plans.
• Support incident response planning and coordinate with internal teams and vendors.
• Communicate risks, findings, and mitigation strategies to stakeholders across the organization.

Qualifications

• Bachelor's degree in Information Technology, Computer Engineering, or related field.
• 3+ years of cybersecurity risk management experience and 1–2 years in IT operations.
• Solid knowledge of cybersecurity frameworks (ISO 27001, NIST CSF) and data protection laws (GDPR, DPA2012).
• Strong analytical, problem-solving, and communication skills.
• Familiar with cybersecurity tools, technologies, and IT infrastructure.
• Entry-level certification preferred (e.g., CompTIA Security+ or equivalent).
• Able to manage multiple priorities and meet tight deadlines.