Description

Key Responsibilities Cybersecurity Compliance & Assurance Monitor and assess compliance with cybersecurity policies, standards, and regulatory requirements.

Establish and maintain a cybersecurity compliance and assurance program aligned with industry frameworks.

Conduct periodic cybersecurity control assessments based on business risk and criticality.

Develop and manage evidence collection, validation, and reporting processes for compliance activities.

Track compliance findings, validate remediation efforts, and ensure timely closure. Audit & Control Testing Plan and execute internal and external cybersecurity audits.

Coordinate with auditors, regulators, and business stakeholders during audit engagements.

Perform cybersecurity control testing and validate control effectiveness. Maintain audit evidence and support regulatory and customer compliance requests.

Risk & Governance Identify compliance gaps and coordinate with the cybersecurity risk team for risk registration and mitigation.

Maintain assurance findings and corrective action tracking. Support vendor security assurance and third-party compliance assessments.

Stakeholder Management Collaborate with Cybersecurity Architecture, IT, OT, Legal, Procurement, Risk, and business teams to ensure compliance requirements are implemented.

Coordinate with external regulators and industry bodies to stay aligned with evolving compliance obligations.

Support contractual cybersecurity compliance requirements with customers and vendors. Security Awareness Develop and deliver cybersecurity compliance training and awareness programs.

Promote security best practices and compliance awareness across the organization.

Transformation & Project Assurance Support major IT and OT transformation initiatives by defining assurance controls and validation criteria.

Coordinate external security assessments such as penetration testing and red team exercises where required.

Required Skills Cybersecurity Compliance Cybersecurity Frameworks & Controls IT Audit & Control Testing Regulatory Compliance Risk Assessment & Risk Management Vendor Security Assurance Governance, Risk & Compliance (GRC) Security Control Validation Audit Management Stakeholder Management Qualifications Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related discipline. 6–8 years of experience in Cybersecurity Assurance, IT Audit, Risk & Compliance, or Governance. Hands-on experience with cybersecurity audits, control testing, and compliance assessments. Experience working with external auditors, regulators, and compliance frameworks. Strong understanding of cybersecurity governance, risk management, and regulatory environments. Preferred Skills Experience with IT and OT security environments. Knowledge of vendor risk management and third-party assurance. Strong analytical, documentation, communication, and stakeholder management skills. Relevant cybersecurity certifications (such as CISSP, CISA, CRISC, ISO 27001 Lead Auditor, or equivalent) are an advantage

Key Skills

Education

Bachelor's degree