Risk Services - Cybersecurity Audit and Data Protection Associate (July 2027 Intake)
Core
Associate-level cybersecurity audit and data protection services, assessing client IT controls, compliance with regulations (GDPR, PDPA), and risk vulnerabilities.
Role type
Associate, cybersecurity audit and assurance
Builds
Cybersecurity and data protection compliance assessments and audit reports
Domain
Technology, Media, and Telecommunications (TMT) / Cybersecurity & Privacy
Deliverable
dashboards & analysis
Required skills
Cybersecurity fundamentals, Data privacy principles, Regulatory compliance (GDPR, ISO 27001, NIST), Gap analysis, IT control evaluation, Risk identification, Reporting, Cloud security basics, Scripting (Python/Bash/PowerShell)
Preferred skills
Offensive security certifications (OSCP, CEH, eJPT), CTF participation, Open-source tool contributions, Automation
Technologies
Microsoft 365, AWS, Azure, Kali Linux, Burp Suite, Nmap, Metasploit, Covenant, BloodHound, OWASP Top 10
Responsibilities
Collaborate on cybersecurity and data protection service delivery, Support assessments against local and international standards, Perform gap analyses and compliance reviews, Assist in planning and executing technology audits, Gather audit evidence and evaluate IT controls, Identify risks and prepare audit reports, Engage in cyber simulation exercises
Seniority
Associate, entry-level professional