Senior Security Assurance Specialist

About the role

We are looking for an experienced Senior Security Assurance Specialist to lead security assurance activities across our technology landscape, including applications, infrastructure, cloud environments and third‑party services. The role involves assessing control effectiveness, coordinating reviews, identifying gaps and supporting audits and certifications.

Key responsibilities

• Develop and maintain security assurance strategies, methodologies, standards and assessment frameworks aligned with risk appetite and regulatory requirements.
• Conduct security control assessments across applications, infrastructure, cloud platforms, networks, endpoints, databases and information systems.
• Review technical and organizational controls such as access management, authentication, encryption, logging, vulnerability management, configuration, backup and incident response.
• Coordinate security testing activities, validate remediation evidence and maintain a centralized register of findings, risks and remediation actions.
• Perform third‑party security assurance assessments and support vendor onboarding, due‑diligence and compliance reporting for frameworks like ISO 27001, SOC 2, PCI DSS, NIST and CIS.

Required profile

• Senior‑level professional with extensive experience in security assurance, risk assessment and control testing.
• Strong analytical skills and ability to provide independent insight into the organization’s security posture while maintaining effective stakeholder relationships.

Required skills

• Authentication and authorization controls
• Privileged access management
• Security configuration and endpoint‑security controls
• IT audit and security assurance
• DevSecOps controls and secure development practices
• Technology risk and security risk assessment
• Cloud security (SaaS, PaaS, IaaS, APIs, containers)
• Vulnerability Management, Patch Management, Configuration Management
• Identity and Access Management (IAM)
• Application security and security testing