Risk Services - Cybersecurity Audit and Data Protection Associate (July 2027 Intake)
Core
Associate role delivering cybersecurity audits, data protection assessments, and compliance reviews against frameworks like GDPR, ISO 27001, and NIST.
Role type
Associate, cybersecurity audit and compliance
Builds
audit reports, compliance assessments, and actionable risk mitigation recommendations
Domain
Cybersecurity, Data Privacy, Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
cybersecurity fundamentals, network principles, cryptography basics, DLP technologies, cloud security principles, vulnerability assessment, scripting (Python/Bash/PowerShell), regulatory knowledge (GDPR, PDPA)
Preferred skills
offensive security certifications (OSCP, CEH, eJPT), CTF participation, open-source tool contributions
Technologies
Microsoft 365, AWS, Azure, Kali Linux, Burp Suite, Nmap, Metasploit, Covenant, BloodHound, OWASP Top 10
Responsibilities
Support assessments of data protection practices against local and international regulations, perform gap analyses and compliance assessments, assist in planning and executing technology audits, gather audit evidence and evaluate IT controls, identify risks and vulnerabilities, prepare audit reports with findings and recommendations, conduct compliance reviews against technology standards, participate in cyber simulation exercises
Seniority
Associate, entry-level (final-year student or recent graduate)