As a Technology Risk Advisor, you will be working together with more experienced colleagues on various technology risk-related projects such as Cyber security assessments, IT and Application audits, Technological implementations and Data Privacy. All our projects aim to help our clients be better protected against cybersecurity threats. In practice, this involves:
- Gaining an understanding of a client’s IT environment and risk landscape, assessing the maturity of their IT systems and processes and making recommendations to further improve.
- Identifying and assessing weaknesses in clients’ control environments, applications or processes through interviews and the inspection of systems and documents.
- Helping clients improve their security posture by implementing risk management and security tools, improving their risk governance and building security controls.
- Launching ethical social engineering attacks at clients as part of cyber security assignments.
Performing certification processes which involve assessing evidence and providing value-adding reports such as SOC2 or ISO27001 certificates.