We are looking for Cyber Security GRC Senior Specialist for our company!
Department: Cyber Security.
Job Purpose:
- Provides general GRC cybersecurity support.
- Perform cybersecurity tasks.
- Identifies, assesses, and manages an organization’s cybersecurity risks protecting its information and technology assets in line with organizational policies and procedures and related laws and regulations.
- Develop cybersecurity policies and related documentation.
- Review existing and proposed policies and related documentation with stakeholders.
- Work with stakeholders to develop cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy.
- Ensures an organization’s cybersecurity program complies with applicable requirements, policies, and standards.
- Develops, updates, and maintains cybersecurity policies to support and align with an organization’s cybersecurity requirements.
- Help analyzes cybersecurity controls and assesses their effectiveness.
- Participate in cybersecurity audits to assess an organization’s compliance with applicable requirements, policies, standards, and controls.
- Assist in preparing audit reports and communicating them to authorized parties.
- Help evaluate cybersecurity aspects of contracts to ensure compliance with regulatory requirements.
- Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation.
- Support in reviewing cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.
- Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.
- Help in Developing the methods to effectively monitor and measure risk, compliance, and assurance efforts.
- Maintain knowledge of applicable cybersecurity defense policies, regulations, and compliance documents as they pertain to cybersecurity defense auditing.
- Provide support to compliance activities as necessary.
- Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance.
- Conduct Cybersecurity risk assessment on applications, new services, when obtaining third party services.
- NCA, ISO 27001
Qualifications:
- Bachelor’s degree in computer science, Cyber Security, Computer Engineering, Information Technology
- A minimum of 5 years of relevant experience
