Cybersecurity Internal Assessor
Core
Conduct internal cybersecurity assessments to ensure regulatory compliance and control effectiveness across a global organization, including M&A security reviews and secure shutdown activities.
Role type
Senior IC cybersecurity internal assessor (audit & compliance)
Builds
Internal assurance reports, gap analysis, and remediation plans for cybersecurity controls and regulatory readiness.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
Cybersecurity control frameworks (ISO/IEC 27001, NIST, IEC 62443), Regulatory compliance (NIS2, Cyber Resilience Act), Audit methodology, Gap analysis, Stakeholder interviewing, Report writing
Preferred skills
M&A security assessments, Secure decommissioning, OT/Industrial cybersecurity, GRC tools
Technologies
ISO/IEC 27001, NIST Cybersecurity Framework, IEC 62443, NIS2 Directive, Cyber Resilience Act
Responsibilities
Plan and conduct internal cybersecurity assessments against regulatory requirements; Assess design and operating effectiveness of controls; Support gap assessments and readiness reviews; Conduct interviews and workshops with control owners; Document assessment scope, findings, and risks; Ensure compliance with external and internal regulations.
Seniority
Senior, hands-on IC
