You will lead the development and execution of the organization's cyber governance, risk, and compliance strategy and roadmap.
Responsibilities
- Establish and enforce cyber policies, standards, and procedures across the organization.
- Conduct cyber risk assessments and audits, including contract reviews and IT or business process reviews.
- Maintain audit documentation, including controls inventories, risk registers, and remediation plans.
- Monitor and report on the effectiveness of cyber controls and compliance performance.
- Standardize IT operations by documenting and operationalizing processes into workflow engines like helpdesk software or ERP systems.
Required Skills
- 5+ years of experience in cybersecurity, risk management, or a related field.
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- Deep knowledge of cybersecurity frameworks including NIST, ISO, COBIT, and PCI-DSS.
- Proven ability to evaluate cyber risks and implement mitigation measures.
- Strong analytical and problem-solving skills.
- Ability to collaborate with senior management, legal, audit, and external regulators.
- Experience maintaining formal compliance documentation for audit readiness.
Preferred Skills
- Professional certification such as CISSP, CISM, CRISC, or CISA.