Cybersecurity Assurance Analyst

Enstar Group

4d•$113,000 - $160,000

About The Position

The Cybersecurity Assurance Specialist provides independent, technically informed assurance over Enstar’s cybersecurity tools, controls and operational processes. The role plans and performs risk-based reviews to determine whether controls are appropriately designed, configured, implemented and operating effectively. It applies expertise in network and infrastructure security to translate evidence-based observations into clear findings and practical recommendations for Cybersecurity, Technology and senior management. The role also coordinates assurance activities with third-party staff. The position covers assurance planning and delivery, technology asset and software governance, network and infrastructure security, security tools and platforms, AI assurance and security testing, and findings, reporting and remediation. It includes conducting reviews of AI-enabled solutions and coordinating penetration tests and other security assessments. The role may also perform other duties and special projects as identified from time to time.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Cybersecurity or a related discipline.
Minimum five years of relevant experience in network security, infrastructure security, cloud security, security engineering, technical cybersecurity assurance or security consulting.
Experience applying structured assurance methods to evaluate control design and operating effectiveness through inquiry, inspection, observation, data analysis, sampling and reperformance.
Experience producing assurance reports and presenting findings to technical teams, control owners and senior management.
Strong practical understanding of TCP/IP, routing, switching, subnets, CIDR, firewalls, network segmentation, DNS, VPNs, proxies, NAT, remote access, public exposure, IP allowlisting and network logging.
Practical working knowledge of one or more of Palo Alto GlobalProtect and Prisma Access, CrowdStrike Falcon Complete, Microsoft Intune, CyberArk and Microsoft Azure sufficient to conduct credible and independent assurance reviews.
Ability to interpret network and data-flow diagrams, firewall rules, cloud and endpoint configurations, dashboards, alerts, logs, vulnerability results and penetration-test reports.
Knowledge of technology asset inventory and lifecycle management, endpoint protection, device compliance, software governance, vulnerability and patch management, privileged access, identity and access management, security monitoring, encryption, certificate management and incident-response processes, including management of unauthorized, unsupported and end-of-life technology.
Knowledge of cybersecurity and control frameworks such as NIST CSF, ISO 27001 and CIS Controls.
Working knowledge of AI and generative AI security and assurance concepts, including prompt injection, sensitive-data leakage, access control, model and provider risk, human oversight, output validation, monitoring and relevant guidance such as the NIST AI Risk Management Framework.
Collaborative team player who is attentive to detail and able to challenge constructively while maintaining independence.
Analytical and evidence-focused, with a proactive and result-oriented approach.
Strong written and oral communication skills, including producing concise assurance reports and confidently presenting findings to engineers, control owners and senior management.
Ability to translate technical observations into clear business risk for technical and non-technical audiences.
Ability to work effectively with colleagues and stakeholders across different regions and time zones.
Willingness to support assurance and testing activity outside normal working hours when required.
Willingness to travel on company business as required and agility to respond to changing security and business priorities.

Nice To Haves

Relevant certifications such as CISSP, CISA, CRISC, CCSP, CCNA, PCNSE or AZ-500 are desirable.

Responsibilities

Plan and deliver risk-based assurance reviews of cybersecurity tools, technical controls and operational processes in accordance with the agreed assurance plan.
Define review objectives, scope, control criteria, evidence requirements, sampling approaches and test procedures.
Review architecture and data-flow diagrams, technical configurations, policies, procedures, inventories, dashboards, alerts, logs, tickets and exceptions, and form evidence-based conclusions.
Assess control design and operating effectiveness, distinguishing between the presence of a security tool and the protection achieved through its configuration, coverage and operation.
Assess governance, completeness and accuracy of technology asset inventories; reconcile authoritative sources, ownership, lifecycle status and security-tool coverage; investigate unmanaged, stale, duplicate or unknown assets.
Review installed software against approved standards and business need; assess governance, ownership, licensing, version currency and lifecycle status; identify unauthorized, obsolete, unsupported or end-of-life/end-of-support software for remediation.
Perform network and infrastructure assurance across TCP/IP, ports and protocols, routing, subnets, CIDR, firewalls, access-control lists, proxies, NAT, VPNs, remote access, public exposure and IP allowlisting.
Evaluate network segmentation, trust boundaries and data flows, and validate that segmentation achieves its intended security outcome.
Assess DNS architecture and controls, including name resolution, domain and subdomain management, DNS records, filtering, external exposure and common DNS-related risks.
Review encryption controls for data at rest and in transit, including TLS, certificates, approved protocols, key management, ownership, rotation and documented exceptions.
Assess Palo Alto GlobalProtect and Prisma Access remote-access configurations, security policies, application and URL controls, routing, logging, monitoring and policy exceptions.
Assess CrowdStrike Falcon Complete sensor deployment and health, prevention policies, detections, managed response, host containment, exclusions, vulnerability exposure and escalation processes.
Assess Microsoft Intune device enrolment, compliance checks and policies, application protection, encryption, patch and security-control status, exceptions, reporting and integration with Conditional Access.
Assess CyberArk privileged-account onboarding, vaulting, credential rotation, session management, monitoring, reconciliation, break-glass access and coverage reporting.
Assess Microsoft Azure security and networking controls, including identity, virtual networks, subnets, peering, private and public endpoints, network security groups, storage security, encryption, logging and privileged access.
Conduct assurance reviews of Enstar’s AI-enabled solutions and use cases.
Coordinate and support penetration tests, cloud and mobile assessments, social-engineering exercises, purple-team activities and EDR control validation, including scope, prerequisites, rules of engagement and review of results.
Assess data leaving the Enstar estate for malicious behaviour, assist with Shadow AI discovery, and independently validate AI defence controls and accidental data oversharing.
Document findings that explain the condition, supporting evidence, affected assets or processes, risk, root cause and proportionate recommended action.
Present assurance results to technical teams, control owners, senior management and governance forums; agree accountable owners and target dates while preserving assurance independence.
Track findings through completion, validate closure evidence or retesting, escalate significant or overdue actions, analyse recurring themes and support relevant KPI, KRI and Board reporting.
Perform other duties and special projects as identified from time to time.
Keep abreast of the changing threat landscape.

Benefits

Medical, dental and vision healthcare for single and family coverage.
Virtual access to board-certified doctors and pediatricians 24/7 for urgent care.
Health Savings Account (HSA) or Flexible Spending Account (FSA).
Dependent Care FSA for daycare expenses.
Employee Assistance Programs (EAP) for health and well-being.
Optional pet and home/auto insurance.
Wellness reimbursement of up to $600 annually for wellness-related expenses.
401(k) retirement plan with company matching up to 6% of employee contributions.
One paid annual volunteer day.
Professional qualifications and study support.
Training, conferences, seminars and continuing professional development opportunities.
Digital Learning Hub access to LinkedIn Learning resources.
Physical, mental and financial wellbeing initiatives.