Description

You will lead the development and maintenance of a comprehensive IT risk and controls framework aligned with strategic and regulatory requirements.

Responsibilities

• Develop and maintain IT risk and controls frameworks to ensure compliance with laws and regulations.
• Conduct regular risk assessments to identify vulnerabilities and implement mitigation strategies.
• Establish and enforce IT policies, procedures, and standards across the organization.
• Collaborate with IT teams to assess the design and effectiveness of controls and identify improvements.
• Monitor risk status and report key issues, trends, and findings to senior management and board committees.
• Provide guidance and support during internal and external audits to ensure prompt resolution of findings.

Required Skills

• 10-15 years of experience in IT management and information security.
• Proven experience developing and implementing IT risk and controls frameworks.
• Hands-on knowledge of Active Directory management.
• Experience with Network Access Control (NAC).
• Experience with Data Loss Prevention (DLP) tools.
• Proficiency in Firewall and IPS management.
• Knowledge of digital channels, email security, and Web Application Firewalls.
• Familiarity with Cloud security tools.
• Strong analytical skills for assessing complex IT risks.
• Excellent communication skills for stakeholder management and cross-functional collaboration.

Preferred Skills

• Relevant certifications such as CISC, CISSP, or CRISC.

Key Skills

Education

Any Graduate