Cybersecurity Risk Officer

About the RoleWe’re looking for a Cybersecurity Risk Officer to strengthen our organization’s security posture and ensure robust protection against evolving cyber threats. You’ll assess and manage cybersecurity risks, oversee third-party security, and support business continuity and incident response efforts.Key ResponsibilitiesImplement and maintain cybersecurity risk management frameworks and policies.Conduct vulnerability scans, penetration testing, and ongoing risk assessments.Maintain and update the cybersecurity risk register and track remediation efforts.Manage risk acceptance and exception processes, and report key risk indicators (KRIs).Assess and monitor third-party vendors for security and regulatory compliance (ISO 27001, SOC 2, GDPR, DPA2012).Ensure cybersecurity controls are integrated into business continuity and disaster recovery (BC/DR) plans.Support incident response planning and coordinate with internal teams and vendors.Communicate risks, findings, and mitigation strategies to stakeholders across the organization.QualificationsBachelor’s degree in Information Technology, Computer Engineering, or related field.3+ years of cybersecurity risk management experience and 1–2 years in IT operations.Solid knowledge of cybersecurity frameworks (ISO 27001, NIST CSF) and data protection laws (GDPR, DPA2012).Strong analytical, problem-solving, and communication skills.Familiar with cybersecurity tools, technologies, and IT infrastructure.Entry-level certification preferred (e.g., CompTIA Security+ or equivalent).Able to manage multiple priorities and meet tight deadlines.