Technical Risk Consultant, Ekco

• Strong technical understanding of common enterprise systems, applications, and network infrastructure
• Experience conducting technical risk assessments or security reviews within complex IT environments
• Ability to communicate technical risks clearly to both technical and non-technical stakeholders
• Strong analytical and problem-solving skills
• Knowledge of:
• Access controls and identity management
• Network segmentation and infrastructure security
• Vulnerability management
• Data protection and security best practices
• Risk assessment methodologies

Desirable

• We are looking for an experienced technical risk professional with a strong understanding of enterprise IT environments, infrastructure, and security best practices
• The successful candidate will be responsible for conducting system and technology risk assessments across a range of platforms, applications, and network environments, identifying vulnerabilities and providing practical risk-based recommendations
• This role would suit someone with a broad technical background across infrastructure and security, ideally with previous exposure to Information Security, Governance, Risk & Compliance (GRC), or CISO-level activities
• Conduct technical and security risk assessments across systems, applications, and network infrastructure
• Review and assess access controls, user permissions, authentication methods, and privileged access management
• Evaluate network security posture including open ports, segmentation, firewall configurations, and exposure risks
• Identify vulnerabilities and security weaknesses within enterprise environments and provide remediation recommendations
• Assess data protection controls and alignment with security and compliance requirements
• Work with stakeholders to understand organisational risk appetite and support risk-based decision making
• Produce clear and concise risk assessment documentation, findings reports, and remediation plans
• Collaborate with technical and business teams to improve overall security posture and operational resilience