Requirements

Must have

• We need at least 10 years of experience in security risk management and threat assessments.
• We need strong working knowledge of risk management frameworks such as ISO 31000 and NIST RMF.
• We need hands‑on experience with threat modelling approaches including STRIDE and DREAD.
• We need proven ability to identify and rank vulnerabilities across cyber, physical, and operational areas.
• We need experience using risk assessment matrices and risk evaluation methods.
• We need strong reporting skills and the ability to communicate effectively with both technical and executive stakeholders.
• We need familiarity with regulatory and compliance frameworks, including PHIPA.
• We need strong analytical and critical thinking skills.
• We need excellent written and verbal communication skills.
• We need the ability to work...