Must-Have Skills:

Core Skills

Strong understanding of IT security governance, risk, and control frameworks.

Ability to identify, assess, and remediate security gaps, vulnerabilities, and risks.

Proven experience in managing remediation plans, monitoring issues, and ensuring timely closure of identified gaps.

Technical Skills & Tooling

Hands-on experience with vulnerability management, risk remediation, and security assessments.

Familiarity with security testing activities such as penetration testing, threat modeling, and audits.

Strong ability to assess threats, vulnerabilities, and controls.

Skilled in preparing, tracking, and presenting operational and governance reports.

Tools Required: Power BI, ServiceNow, Cyberport, Microsoft 365 (Excel, Pivot tables, Data Analysis).

Experience handling large datasets and creating dashboards for reporting.

Stakeholder Management & Communication

Excellent verbal and written communication skills in English.

Ability to explain complex issues to both technical and business stakeholders.

Experience collaborating with cross-functional teams (Cybersecurity, IT, Risk, Audit, Business).

Strong influencing, negotiation, and relationship-building skills with global teams.

Soft Skills

Strong problem-solving and conflict resolution abilities.

Ability to take ownership, work independently, and handle escalations.

Education & Experience

Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field.

Proven experience in IT Security Governance, Risk & Compliance management, or Vulnerability Management (preferably in a global enterprise environment).

Candidate Availability

Available to join within 15–30 days.

Candidates on a 30-day notice period preferred.

Flexibility to work in UK hours.

Good to Have:

Industry-recognized cybersecurity certifications (CISA, CRISC, CISM, CISSP, CGEIT).

Experience in financial services sector or global corporate environment.

Familiarity with audit, compliance reporting, and regulatory standards.

Knowledge of process improvement in cybersecurity or risk remediation.

Previous exposure to escalation management and governance forums.