Job Details

Role Purpose

The Senior Cyber Security Assurance Specialist is responsible for strengthening the organization's security posture by embedding security and privacy controls throughout the technology development and project delivery lifecycle. The role focuses on security assurance, penetration testing, vulnerability identification, risk assessment and the implementation of appropriate security measures to protect enterprise systems, applications, infrastructure and digital services.

The successful candidate will work closely with technology and project teams to identify potential security exposures, assess compliance with security standards and ensure that security requirements are incorporated from initial design through to implementation and deployment.

Key Responsibilities

• Oversee and coordinate Security and Privacy by Design Assurance (SPDA) activities, ensuring that appropriate security and privacy controls are incorporated into project delivery.

• Drive the adoption of security-by-design principles across technology initiatives, identifying and addressing potential security and privacy risks throughout the development lifecycle.

• Perform internal and external penetration testing across infrastructure, web applications, APIs and network environments to identify and assess security vulnerabilities.

• Evaluate new and existing systems, products and services against organizational security policies, recognized industry standards and established security practices.

• Perform controlled vulnerability exploitation to establish the potential impact of unauthorized access, information exposure and data compromise.

• Execute automated and manual security assessments to evaluate system resilience against different attack vectors.

• Contribute to the architecture and design of cybersecurity solutions, ensuring alignment with industry best practices, performance requirements and scalability considerations.

• Partner with infrastructure, development and IT teams to ensure secure implementation and integration of technology solutions.

• Apply threat modelling and security risk assessment methodologies during the design and development of systems and applications.

• Conduct security reviews of technology projects and identify Material, Procedural and Administrative (MPA) risks, ensuring that appropriate remediation measures are implemented.

• Validate that technology initiatives meet the required security baselines before progressing through implementation and delivery.

• Monitor emerging cybersecurity threats, vulnerabilities, attack methodologies and defensive techniques to maintain an effective security posture.

• Investigate and evaluate emerging cybersecurity technologies and methodologies that could enhance the organization's security capabilities.

• Support knowledge transfer, technical coaching and mentoring within the cybersecurity function to encourage continuous improvement and capability development.

Minimum Requirements

Experience

• At least 5 years' practical experience in penetration testing, ethical hacking or a closely related cybersecurity discipline.

• Demonstrable experience conducting security assessments and identifying vulnerabilities across different technology environments.

Qualifications and Certifications

Relevant cybersecurity certifications will be highly advantageous, including:

• OSCP (Offensive Security Certified Professional).

• CEH (Certified Ethical Hacker).

• CISSP (Certified Information Systems Security Professional).

• CISA (Certified Information Systems Auditor).

Technical Competencies

• Practical experience with penetration testing tools, including Kali Linux, Burp Suite, Metasploit and Nessus.

• Strong understanding of network security, web application security, cloud security and mobile application security.

• Programming and scripting knowledge in Python, Bash, Ruby, PowerShell or JavaScript.

• Detailed understanding of networking protocols and technologies, including TCP/IP, DNS, HTTP/S and SSL/TLS.

• Knowledge of common cybersecurity vulnerabilities and attack techniques, including SQL injection, XSS, CSRF and buffer overflow.

• Understanding of security architecture, vulnerability management, threat modelling and risk assessment practices.

Behavioral Competencies

• Strong analytical thinking and problem-solving capabilities.

• Ability to interpret technical security findings and translate them into practical business risks and recommendations.

• Excellent written and verbal communication skills, including the ability to engage effectively with technical and non-technical stakeholders.

• High attention to detail and a structured, methodical approach to security testing, analysis and reporting.

• Ability to collaborate across multidisciplinary teams and influence the adoption of security best practices.