Security Risk Specialist (8+ years of experience)

Job summary

Acts as a strategic liaison between the cybersecurity function and business portfolio decision-makers to guide investments and ensure security consistency. Focuses on the sustainability of operations and the integration of security requirements into business initiatives.

Job details

Description: The mandate targets a liaison profile between the cybersecurity function and the decision-makers of a business portfolio, rather than an operational technical execution role. The wording of the mandate—tactical driver, guiding investments, ensuring consistency between security requirements and initiatives, sustainability of operations—positions the role as strategic support integrated into the portfolio, rather than a SOC analyst or security architect position. The required experience combines a general IT foundation of 8 to 12 years with at least 5 years of focused specialization in cybersecurity, technology risk management, or security governance, which sets this profile apart from a pure technical specialist. A significant portion of the qualifications focuses on simplification, influencing without hierarchical authority, and building trusting relationships with business partners, which underscores the advisory aspect of the role beyond technical expertise. Requirements Required: 9 to 12 years of experience in information technology, including a minimum of 5 years in cybersecurity, technology risk management, or security governance Experience in risk analysis and integrating cybersecurity into business processes Significant experience supporting projects, programs, or transformation initiatives Knowledge of risk management methods and cybersecurity controls Desired: Ability to identify cybersecurity risks in diverse business and technology contexts Ability to analyze potential impacts on operations, data, compliance, and business objectives Ability to recommend balanced solutions between business needs and an acceptable level of risk Ability to manage multiple files, cases, or initiatives simultaneously in complex transformation environments Asset: Ability to communicate complex technical concepts in a clear and understandable manner to non-technical audiences Influencing skills without formal authority and ability to influence multidisciplinary stakeholders Ability to build trusted relationships with business partners

What you’ll do

Acts as a strategic liaison between the cybersecurity function and business portfolio decision-makers to guide investments and ensure security consistency. Focuses on the sustainability of operations and the integration of security requirements into business initiatives.

Requirements

Requires 9 to 12 years of IT experience, with at least 5 years specializing in cybersecurity, risk management, or governance. Candidates must demonstrate the ability to influence stakeholders without formal authority and communicate complex technical concepts to non-technical audiences.

Listed skills

• Project management · Preferred
• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity
• Technology Risk Management
• Security Governance
• Risk Analysis
• Business Process Integration
• Project Management
• Transformation Initiatives
• Risk Management Methods
• Cybersecurity Controls
• Stakeholder Management
• Influencing Skills
• Strategic Advisory

Job areas

• Security & Safety
• Technology
• Consulting
• Management & Leadership