Cyber Security

Airswift; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Job summary

Airswift is seeking an experienced L3 Cyber Risk & Compliance Advisor to support cyber risk management, compliance, and assurance activities across our US and International operations. You will work with cybersecurity, IT, and OT stakeholders to identify, assess, and manage cyber risks and strengthen security posture.

Responsibilities include risk assessments, governance, secure-by-design reviews, and cyber resilience initiatives across diverse tech landscapes.

Qualifications

• 8-10 years of experience in Cybersecurity, IT Risk, Compliance, Audit, or related fields.
• Proven experience conducting cybersecurity assessments and risk management activities.
• Experience working within enterprise IT environments.
• Strong understanding of cybersecurity governance and assurance frameworks.

Responsibilities

• Conduct cybersecurity risk assessments across applications, infrastructure, projects, and vendors.
• Document risks, control gaps, and remediation recommendations.
• Evaluate security controls against internal standards and industry frameworks.
• Support risk reporting, trend analysis, and cyber threat awareness activities.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Ensure regulatory and compliance requirements are incorporated into assessments and recommendations.
• Participate in governance, reporting, and control assurance processes.
• Monitor remediation plans and security exceptions.
• Support secure-by-design reviews for new technologies and architectures.
• Provide risk-based guidance during project lifecycles and architecture reviews.
• Identify and elevate security risks and control deficiencies.
• Engage stakeholders across IT, cybersecurity, OT, and business teams.
• Present findings in technical and business-friendly language.
• Support cyber awareness initiatives and incident response activities.

Skills

IAM

MFA

PAM

Network Security

Endpoint Security

Security Logging

Vulnerability Management

Risk Assessment

Education

Bachelor's degree in Cybersecurity/Info Tech/Engineering

Master's degree in Cybersecurity/CS

Job description

About the Role

We are seeking an experienced L3 Cyber Risk & Compliance Advisor to support cyber risk management, compliance, and assurance activities across our US and International operations. This role works closely with cybersecurity, IT, and operational technology (OT) stakeholders to identify, assess, communicate, and manage cyber risks while strengthening the organization's overall security posture. As part of the Cyber Security function, you will contribute to risk and compliance initiatives, secure-by-design reviews, cyber awareness programs, and cyber resilience activities across a diverse technology landscape.

Key Responsibilities

• Cyber Risk & Assurance: Conduct cybersecurity assessments and risk evaluations across applications, infrastructure, projects, and vendors.
• Identify and document risks, control gaps, and remediation recommendations.
• Evaluate security controls against internal standards and industry frameworks.
• Support risk reporting, trend analysis, and cyber threat awareness activities.
• Compliance & Governance: Support the development and maintenance of cybersecurity policies, standards, and procedures.
• Ensure regulatory and compliance requirements are incorporated into assessments and recommendations.
• Participate in governance, reporting, and control assurance processes.
• Monitor remediation plans, risk treatment activities, and security exceptions.
• Secure by Design: Support secure-by-design reviews for new and evolving technologies.
• Provide risk-based guidance during architecture reviews and project lifecycle activities.
• Validate compliance with cybersecurity standards and baseline controls.
• Identify and elevate security risks and control deficiencies.
• Stakeholder Engagement: Partner with IT, cybersecurity, digital, operational, and business teams.
• Communicate security expectations and recommendations to project teams and system owners.
• Collaborate with vendors and third-party partners on risk and assurance activities.
• Present cybersecurity findings in both technical and business-friendly language.
• Cyber Resilience & Awareness: Support cyber awareness initiatives and promote a strong security culture.
• Assist during cyber incident and crisis management activities when required.
• Contribute to business continuity, resilience, and post-incident improvement efforts.

What You'll Bring

Required Experience

• 8-10 years of experience in Cybersecurity, IT Risk, Compliance, Audit, or related fields.
• Proven experience conducting cybersecurity assessments and risk management activities.
• Experience working within enterprise IT environments.
• Strong understanding of cybersecurity governance and assurance frameworks.

Technical Knowledge

• Identity & Access Management (IAM)
• Multi-Factor Authentication (MFA)
• Privileged Access Management (PAM)
• Network Security & Segmentation
• Endpoint Security
• Security Logging & Monitoring
• Vulnerability Management
• Risk Assessment and Remediation Processes

Knowledge of frameworks and standards including:

• NIST Cybersecurity Framework (CSF)
• ISO 27001
• CIS Controls

Education & Certifications Required

Bachelor's degree in Cybersecurity, Information Technology, Engineering, or a related field.

Preferred

Master's degree in Cybersecurity, Computer Science, or a related discipline.

Certifications

• CISSP
• CISM
• CRISC
• Security+
• ISO 27001 Certification (or working toward certification)