Cyber Risk Expert (Part-Time)

About the role

We are seeking an experienced Cyber Risk Expert to join our team on a part‑time basis. You will work at the intersection of security architecture, cyber risk management, and GRC, helping to embed security, resilience, and compliance into critical projects from day one.

Key responsibilities

• Perform security and risk assessments for high‑impact initiatives, documenting risks and defining mitigation plans.
• Review technical architectures, cloud environments, APIs, integrations, and application designs, applying Security‑by‑Design principles.
• Ensure alignment with frameworks such as ISO 27001/27002/27005, NIST, NIS2, and GDPR, supporting risk governance and compliance.
• Analyze application and infrastructure vulnerabilities, focusing on cloud services, micro‑services, identity management, and third‑party integrations.
• Conduct third‑party security assessments and embed security requirements in contracts.
• Facilitate workshops, translate technical risks into business impacts, and present findings to senior stakeholders.

Required profile

• Minimum 5 years of experience in cyber security, security architecture, cyber risk, or GRC.
• Strong knowledge of ISO 27001/27002/27005, NIST, NIS2, GDPR, and OWASP methodologies.
• Proven ability to conduct technical security reviews and risk assessments.
• Excellent communication skills in English, able to convey complex concepts to both technical and non‑technical audiences.

Required skills

• ISO 27001
• ISO 27002
• ISO 27005
• NIST Cybersecurity Framework
• NIS2 Directive
• GDPR
• OWASP
• Cloud security
• Application security
• Third‑Party Risk Management
• Security Architecture
• Security Assessments
• Governance, Risk & Compliance (GRC)
• Security by Design
• APIs
• Micro‑services
• Identity and Access Management