About this role
<div> <p><span>A career in our Technology Risk Services practice will provide you with the valuable opportunity of working with a diverse regional team on a wide range of industry leading enterprises to help our clients identify, analyze, prioritize, and respond to existing and emerging technology risks. </span><span>The role acts as an advisor to top management, cybersecurity, internal audit, compliance and to risk management functions within the enterprise. For this reason, an up-to-date understanding of the latest Information Security (IS) and cybersecurity threats, trends and technologies is a crucial component of the position, as you will be required to assess existing and emerging technology risks, review and test the design and operating effectiveness of existing controls, and advise the enterprise on the recommended risk mitigation actions to safeguard their valuable information assets, all while navigating the complex landscape of technology risks, and consistently delivering actionable insights and recommendations to ensure our clients’ systems and data are safeguarded against potential threats.</span><span> </span></p> </div> <p> </p> <p><strong> </strong><strong>What is expected from you? </strong></p> <p> </p> <p>As a Senior Associate, you will be reporting to Managers and higher grades, working as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. Your job duties will include but will not be limited to:</p> <ul> <li><span>Collaborate with a diverse talent pool of regional and international teams to effectively deliver key projects within the region.</span><span> </span></li> <li><span>Keep current with trends in the information security industry, including current technologies and emerging threats.</span><span> </span></li> <li><span>Conduct qualitative and quantitative information and cyber security risk assessments to uncover areas of high risk and recommend risk response action plans.</span><span> </span></li> <li><span>Support and advise our clients to mitigate existing and future security and technology risks.</span><span> </span></li> <li><span>Conduct analysis of our clients’ information security environment to detect critical deficiencies in security controls and recommend solutions for improvement.</span><span> </span></li> <li><span>Support and advise our clients on continuity and disaster recovery management activities and review organizational resilience.</span><span> </span></li> <li><span>Support our clients in meeting their regulatory and compliance requirements by assessing their environments against leading international and regional security standards/frameworks, e.g., ISO27001, NIST CSF, ITILv4, NCA-ECC, etc.</span><span> </span></li> <li><span>Contribute to building client relationships and development of key accounts.</span><span> </span></li> </ul> <p><strong>What will you bring?</strong><strong> </strong></p> <div> <div> <p><span style="text-decoration:underline"><strong><span><span>Competencies</span></span><span> </span></strong></span></p> </div> <div> <p><span><span>Client Management</span></span><span> </span></p> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>Can</span><span> effectively interact and communicate with clients and business partners</span></span><span> </span></p> </li> </ul> </div> </div> <div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>Can </span><span>consolidate</span><span> client requirements and translate them into project </span><span>activities</span> <span>and</span> <span>d</span><span>eliverables</span></span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>Can effectively conduct meetings with project stakeholders to gather an understanding of the current organisational environment, including processes, </span><span>risks</span><span> and controls.</span></span><span> </span></p> </li> </ul> </div> <div> <p><span><span>Security Concepts</span></span><span> </span></p> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>Knowledge of</span> <span>s</span><span>everal security </span><span>industry standards</span> <span>and best-practices.</span></span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>A</span><span>ble to </span><span>identify</span><span> technical security gaps and deficiencies in technologies and propose solutions to remediate the identified risks.</span><span> </span></span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>Knowledge of security best-practices, tools, </span><span>methodologies</span><span> and concepts.</span></span><span> </span></p> </li> </ul> </div> <div> <p><span><span>Risk Management </span></span><span> </span></p> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>K</span><span>nowledge of risk </span><span>management</span> <span>methodologies and concepts.</span></span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>Can apply a methodical and structured approach to </span><span>identifying</span><span>, analysing, evaluating, </span><span>prioritising</span><span> and responding to risk</span></span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span><span>Can describe key benefits, </span><span>drawbacks</span><span> and rationale for risk </span><span>response strategies</span></span><span> </span></p> </li> </ul> </div> <div> <p><span> </span><span> </span></p> </div> <div> <p><span style="text-decoration:underline"><strong><span><span>Academic</span><span> requirements</span></span></strong></span><span> </span></p> </div> <div> <p><span>University Degree in applied sciences i.e. computer engineering, computer sciences, information technology management or any other related field.</span><span> </span></p> </div> <div> <p> </p> </div> <div> <p><span style="text-decoration:underline"><strong><span><span>Desirable </span><span>Certifications – Professional</span></span><span> </span></strong></span></p> </div> <div> <ul style="list-style-type:disc"> <li> <p><span>CompTIA Security+</span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span>Certified in Cybersecurity – (ISC)²</span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span>Certified Information Systems Auditor (CISA)</span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span>ISO 27001</span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span>ISO22301</span><span> </span></p> </li> </ul> </div> </div> <div> <div> <ul style="list-style-type:disc"> <li> <p><span>Certified in Risk and Information Systems Control</span><span> </span></p> </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li> <p><span>Information Technology Infrastructure Library (ITIL) Foundations</span><span> </span></p> </li> </ul> </div> </div>