About this role
Finance Business Support Cyber Risk Specialist 01-12-2025 4.600 - 6.150 Medior Dordrecht Als Cyber Risk Specialist bij Promovendum beoordeel je ICT-omgevingen, wijzigingen en applicaties op technische cyberrisico's, adviseer je over beheersmaatregelen en compliance (DORA/AVG), rapporteer je aan management en ondersteun je incidentrespons. Direct solliciteren Neem contact op Automatisch verbeterd voor betere leesbaarheid Cyber Risk Specialist Role purpose: Identify, assess, and reduce cyber risk across systems, applications, and third parties by applying risk frameworks, advising stakeholders, and driving remediation to strengthen organizational security and resilience. Core Responsibilities - Conduct cyber risk assessments (inherent and residual), document findings, and maintain risk registers. - Perform control evaluations and gap analyses against standards (e.g., NIST , ISO 27001 , CIS ) and internal policies. - Partner with IT, Security, Engineering, and business owners to prioritize remediation and track risk treatment plans. - Support third-party/vendor risk reviews, including questionnaires, evidence validation, and ongoing monitoring. - Develop risk reporting and metrics for leadership, including trends, KRIs, and control effectiveness. - Contribute to governance activities such as policy updates, exception handling, and audit readiness. Required Skills & Qualifications - Cyber risk management: threat modeling basics, vulnerability and control concepts, risk quantification/qualitative scoring. - Framework knowledge: NIST CSF/800-53, ISO 27001/27002, SOC 2, PCI DSS (as applicable). - Analytical ability: translate technical issues into business impact and clear recommendations. - Communication: create concise documentation, executive-ready summaries, and stakeholder presentations. - Tools: GRC platforms, ticketing/workflow tools, spreadsheets/dashboards for reporting. Success Measures - Reduced high-risk expo...