Technology Risk & Compliance Consultant & Penetration Tester

About the role

We are looking for experienced professionals to join our security team as Technology Risk & Compliance Consultants and Penetration Testers. You will help clients assess technology risk, achieve compliance, and improve their security posture across cloud, applications, and infrastructure.

Key responsibilities

• Conduct technology risk gap assessments for IT infrastructure, applications, cloud services, and operational environments.
• Perform compliance readiness and maturity assessments against ISO 27001, ISO 27002, NIST Cybersecurity Framework, CIS Controls, PCI DSS and other regulatory requirements.
• Develop risk registers, treatment plans, remediation roadmaps and lead ISO 27001 implementation projects.
• Execute penetration testing of web and mobile applications, APIs, internal networks and external infrastructure, including vulnerability assessments and attack simulations.
• Validate remediation actions, produce detailed technical reports and present findings to stakeholders.
• Support third‑party risk assessments, vendor security reviews and advise on security governance best practices.

Required profile

• Bachelor’s degree in Information Security, Computer Science, Information Systems or related field.
• 5+ years of experience in information security, IT risk, compliance or audit.
• Strong knowledge of ISO 27001/27002, risk management frameworks, ITGC assessments and cloud security fundamentals.
• Hands‑on experience with penetration testing tools and methodologies for web, mobile, API and infrastructure targets.
• Relevant certifications such as CISSP, CISA, CISM, ISO 27001 Lead Auditor/Implementer, CRISC are preferred.

Required skills

• ISO 27001 implementation and certification readiness
• Risk assessment and gap analysis
• IT General Controls (ITGC) assessment
• Cloud security assessment
• Penetration testing (web, mobile, APIs, infrastructure)
• Vulnerability assessment and attack simulation
• Source code review