Description

Own the governance, risk, and compliance lifecycle for information security across the organization. Manage audits, risk assessments, and policy enforcement.

Responsibilities

• Develop, review, and update information security policies, procedures, and frameworks.
• Conduct comprehensive risk assessments and implement risk management strategies.
• Manage internal and external audits, ensuring compliance with regulatory requirements and industry standards.
• Develop and maintain incident response plans, assisting in investigation, root cause analysis, and remediation.
• Design and deliver security awareness training programs and prepare detailed governance reports for senior management.

Required Skills

• 5 to 7 years of experience (Deputy Manager) or 8 to 12 years (Manager) in IT GRC.
• Strong knowledge of Governance, Risk, and Compliance (GRC) principles.
• Proficiency in Information Security (InfoSec) frameworks and regulatory standards.
• Experience with project management tools like MS Project.
• Proficiency in collaboration tools like SharePoint and Microsoft Teams.
• Strong analytical, problem-solving, and organizational skills.
• Excellent oral and written communication skills for stakeholder interaction.

Preferred Skills

• CISA, ISO27001, ISO22301, or CISSP certification.
• Bachelor’s degree in information security, Computer Science, or a related field.

Key Skills

Education

Bachelor’s degree in information security, Computer Science, or a related field. Certification would be an added advantage: CISA, ISO27001, ISO22301, CISSP