5+ years of experience in cybersecurity, information security, or cyber risk, with a background in third-party risk management (TPRM), IT risk, audit, incident response, or access management.
Experience assessing vendor security posture in cloud (SaaS/PaaS)and enterprise environments.
Strong understanding of systems, networks, application architecture, cloud security, and secure system design across AWS, Azure, SaaS, PaaS, APIs, and enterprise integrations.
Experience evaluating data flows, data classification, data protection, data governance, and secure data handling practices.
Knowledge of IAM, SSO, federation, privileged access, cyber threats, vulnerabilities, and attack methodologies.
Ability to interpret SOC 1, SOC 2, ISO certifications, and other third-party assurance artifacts to identify control gaps and residual risk.
Ability to identify, assess, and clearly communicate complex cyber risks, trade-offs, and residual risk.
Experience recommending practical, business-aligned risk based mitigation strategies, including compensating controls and secure design changes.
Proficiency with Microsoft Office tools.
Bachelor's degree in information security, Computer Science, Information Technology, or a related field required. An equivalent of relevant work experience will also be considered.