风险评估 Jobs

I need an independent checking engineer for a solar project. The engineer will assess design compliance at the final design review stage. Key requirements: - Review and verify adherence to international standards. - Ensure designs meet project specifications before approval. Ideal skills and experience: - Expertise in solar project design - Familiarity with international compliance standards - Strong analytical and evaluation skills Looking for professionals with a proven track record in similar projects.

I need a comprehensive growth / expansion business plan that shows precisely how we will widen our market reach and roll out into new domestic regions. The plan should zero-in on both market expansion—winning a larger share of our current customer base—and geographical expansion, outlining which states or cities we should prioritise first and why they make strategic sense. I will provide historical sales data, current operating costs, and an outline of our existing product mix. What I’m missing is a clear, investor-ready roadmap that translates those numbers into credible projections and actionable steps. I expect you to ground your recommendations in solid market research (industry reports, competitor benchmarks, and demographic insights) and to build financial forecast...

PROJECT TITLE: GDPR Data Protection Impact Assessment (DPIA) — B2B SaaS Employee Monitoring Feature PROJECT DESCRIPTION: We are a UK-based, pre-launch B2B SaaS company building a production/ quality-management platform for manufacturers. One feature within the platform involves a deterministic (rules-based, non-AI) system that flags unusually fast task completions to a supervisor, to guide occasional physical spot-checks of work quality. No automated decisions are made — a human always decides whether and how to act on a flag. Our commercial solicitor has advised that this feature requires a formal DPIA before going live, given it involves systematic monitoring of workers, even though it is transparent, deterministic, and includes strong existing safeguards (worker v...

I need a focused penetration test against one of my applications. The engagement is limited strictly to the application layer—no network or infrastructure testing—so I expect you to probe for the kinds of issues highlighted in the OWASP Top 10 and similar standards. Here’s how I picture the engagement: • Pre-engagement call to confirm scope, test window, and rules of engagement • Hands-on testing that blends automated scans (Burp Suite, OWASP ZAP, or your preferred tools) with manual verification and exploitation where safe • A concise yet comprehensive report that includes an executive summary, risk ratings (CVSS v3 or equivalent), step-by-step reproduction, screenshots or PoC scripts, and clear remediation guidance • An optional debrief sessi...

We are seeking a highly skilled, discreet, and expert Cyber Security Specialist / Internal Systems Auditor to monitor platform integrity, investigate staff activities, and ensure strict compliance with company policies. The ideal candidate will operate quietly to identify system abuses, fraudulent activities, and policy violations. Key Responsibilities Audit & Investigation: Actively monitor and investigate the activities of all staff members (from new hires to 20+ year veterans). Threat & Error Detection: Identify system errors, duplicate accounts, fake profiles, and malicious actors within the network. Account Actions: Permanently block and suspend accounts involved in unauthorized activities, including casino/gambling operations, harmful political agendas, or toxic/aggressive...

Our internal security team needs an external, red-team style penetration test focused exclusively on the network infrastructure. I want you to simulate real-world attacks against three key components—our firewalls, routers & switches, and enterprise-grade wireless networks—to see how quickly and effectively our blue team detects, contains, and responds. Scope • Engage the perimeter and internal segments behind our firewalls. • Enumerate and exploit misconfigurations on Cisco-class routers and layer-3 switches. • Probe the corporate and guest Wi-Fi environments, including roaming vulnerabilities and weak encryption scenarios. Primary objective The engagement is not just about finding vulnerabilities; the bigger aim is to pressure-test our incident-re...

Potrzebuję kompleksowego opracowania koncepcji oraz programu funkcjonalno-użytkowego (PFU) dotyczącego zabudowy magazynów energii w obiektach użyteczności publicznej dla 9 lokalizacji —głównie szkołach, urzędach i podobnych placówkach. Zależy mi na materiale, który będzie można od razu wykorzystać do postępowania przetargowego oraz dalszych etapów projektowania. Zakres pracy • Analiza zapotrzebowania energetycznego wybranych typów budynków, identyfikacja profilu zużycia i potencjalnych szczytów obciążenia. • Dobór technologii magazynowania (np. baterie Li-ion, LFP) wraz z uzasadnieniem mocy, pojemności i czasu autonomii. • Schemat integracji z istniejącą infrastrukturą elektroenergetyczną, w tym rozmie...

I'm organizing a pistol shooting match focusing on a combination of accuracy and speed, using a score-based target format. I'm looking for a detailed plan that includes: - Match rules and regulations - Target specifications and scoring system - Stage designs incorporating both speed and accuracy challenges - Safety protocols - Event logistics (e.g., setup, breakdown, and required equipment) Ideal skills and experience: - Background in competitive shooting - Experience in event planning - Strong understanding of safety protocols in shooting sports

I have a draft contract for the sale of our business assets and I need a sharp legal eye to make sure everything is watertight before we sign. The agreement covers a full transfer of our website, customer information, documented business processes, all business-related IP, and our CRM system. Your task is to comb through the document, flag any clauses that expose us to unnecessary risk, and suggest precise wording improvements that protect our interests in areas such as representations & warranties, indemnities, IP assignment, data-protection obligations, and post-completion support. You’ll return: • A marked-up version with tracked changes or inline comments showing every recommended edit. • A concise memo summarising key risks, missing protections, and any f...

Title: Android APK Security Tester / VAPT Expert Required Hume apne Android application ka authorized security audit karwana hai. Hume ek experienced Android security tester chahiye jo APK, APIs aur backend communication ko test karke security vulnerabilities identify kare aur unke practical fixes bataye. Work Scope: - APK static aur dynamic security analysis - Authentication aur session security testing - API security testing - SQL Injection, IDOR, XSS aur access-control testing - SSL/TLS aur certificate pinning review - Sensitive data storage aur data leakage check - APK decompilation, code obfuscation aur tampering protection review - Root detection, emulator detection aur anti-debugging review - Hardcoded API keys, URLs, credentials aur secrets check - Firebase, WebView, permissions...

I’m preparing my organisation for an upcoming ISO 27001 certification assessment and now need an experienced professional to perform the mandatory internal audit. The Information Security Management System is already in place; what I require is an objective review that tests our controls, documents the findings and guides our remediation work so we meet every clause of the standard. Your assignment will cover the full audit cycle—from planning through to the final report—conducted remotely via interviews, document review and evidence sampling. You should be a certified ISO 27001 Lead Auditor (or equivalent) and comfortable using typical audit tools such as Annex A control checklists, risk registers and statement-of-applicability mapping. Deliverables • Audit plan...

I want a thorough, professional security check on two devices—one Android and one iPhone. I have seen unexpected apps or activities, rapid battery drain, and the occasional suspicious pop-up, so I need to confirm whether either handset has been compromised and, if so, understand exactly how to fix it. I have never sideloaded software outside the official stores, but I still want everything verified. Your task is to run a full forensic-level audit: scan for malware or spyware, inspect system logs for unauthorized access, review current privacy and security settings, and highlight every vulnerability you uncover. Please work only under my explicit authorization and within all legal boundaries. Deliverables • A clear, step-by-step report explaining findings for both devices &bu...

I manage an Instagram group that has been hit with repeated malicious posts. My goal is to discover exactly who is behind them so I can protect the community and take the right action. Here is what I already have on hand: • Usernames involved in the attacks • Several matching IP addresses • Names and contact details tied to some of those accounts I have not seen any clear timing pattern—the posts appear random—so I’m hoping your investigative skills can fill in the gaps. What I need from you: 1. Analyse the data I provide and trace each malicious account back to the real individual operating it. 2. Document your findings in a concise report that shows how you linked each username or IP to a confirmed identity (screenshots, lookup logs, or o...

I need a legal expert to review a personal injury settlement offer I received from a retail establishment. I'm particularly concerned about the compensation amount, which I believe is too low compared to my damages. Additionally, I'm unclear about their method of calculation. Key areas of concern: - Medical expenses - Lost wages - Pain and suffering - Payment for time taken to receive treatment for my injury Ideal skills and experience: - Expertise in personal injury law - Experience negotiating settlement offers - Strong analytical skills to clarify calculation methods - Ability to assess fair compensation based on various damages

# Hiring – Freelance NEBOSH IGC Trainer (Virtual) **Grow More Safety Institute & Consulting Pvt. Ltd.** is looking for a highly qualified and experienced **Freelance NEBOSH International General Certificate (IGC) Trainer** to deliver live online training sessions. ## Eligibility (Mandatory) * **CMIOSH** or * **GradIOSH** or * **NEBOSH International Diploma (IDip)** ## Experience * Minimum **3–5 years** of NEBOSH IGC training or relevant HSE industry experience. * Excellent understanding of **IG1 (Management of Health & Safety)** and **IG2 (Practical Risk Assessment)**. * Experience in online/virtual classroom delivery. * Strong English communication and presentation skills. * Ability to explain concepts with practical industrial examples. ## Responsibilities * De...

I have a full set of residential architectural and construction drawings that now need to be turned into a clear‐cut estimate. The scope starts with a moderate-detail quantity take-off: every key element measured and traced, but without diving into shop-drawing-level minutiae. From those quantities I then need firm calculations for labour, materials, and equipment costs, rolled up into a clean bill of quantities and an overall cost summary. Along the way I want all typical estimating housekeeping captured—explicit notes on any exclusions or assumptions you make and a short paragraph flagging potential cost risks you see in the documents. Deliverables • Editable Excel file containing the take-off sheets, rate build-ups, and summary tab • PDF export of the same workbook...

Looking for an experienced strategy consultant to support our business expansion into the UAE. This engagement will involve evaluating vendors, recommending jurisdictions, assessing banking, legal & tax strategies, conducting financial feasibility and cost-benefit analysis, and supporting final negotiations. This is a strategy-focused assignment with clearly defined deliverables over 3–4 weeks: Scope of Work/Phases: 1. Discovery (15%): Review business model and existing vendor quotations. 2. Analysis (25%): Create a financial model, jurisdiction comparison, and risk assessment. 3. Recommendation (35%): Deliver a final report, vendor evaluation matrix, and decision-making support. 4. Selection Support (25%): Assist in meetings, review contracts, and finalize negotiations. Deliv...