Cybersecurity Risk & Privacy Specialist

About the role

The Cybersecurity Risk & Privacy Specialist manages the OneTrust platform to embed privacy‑by‑design and security‑by‑default principles across the organization. The role assesses risks, designs mitigation measures, and ensures compliance with global data protection and cybersecurity standards.

Key responsibilities

• Configure, maintain, and optimize OneTrust modules such as Data Mapping, Consent Management, DPIA, and Vendor Risk Management, including API integration with other systems.
• Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) using OneTrust.
• Perform security risk assessments for applications and business processes, monitor emerging threats, and support mitigation strategies.
• Monitor and ensure compliance with global data protection laws and frameworks (e.g., NIST, ISO 27001).
• Collaborate with Legal, IT, Security, and Compliance teams to align cybersecurity and privacy initiatives with business goals.
• Generate reports and dashboards to track metrics and demonstrate compliance.

Required profile

• 4–7 years of experience in information security, governance, and risk management.
• Strong knowledge of security and compliance frameworks such as NIST and ISO 27001.
• Proven ability to work under pressure and handle multiple high‑priority situations.
• Hands‑on experience with the OneTrust platform.
• Excellent time‑management, reporting, and communication skills.
• Relevant security certification is preferred.

Required skills

• OneTrust platform (configuration, API integration, modules)
• Security frameworks: NIST, ISO 27001
• Network and application security principles
• Data mapping, consent management, DPIA, vendor risk management

What we offer

• Supportive work culture that encourages learning, development, and career growth.
• Health and wellbeing programs, including personal and professional support.