Description

Lead the operational delivery of the cybersecurity risk management program and support the GRC operating model.

Responsibilities

• Execute IT and security risk assessments, including supplier and downstream outsource evaluations.
• Drive remediation activities from identification and treatment planning through to closure, holding owners accountable to agreed SLAs.
• Manage security compliance programs, audits, policy management, and security awareness training.
• Develop and maintain security metrics, KRIs, and KPI reporting for operational and executive management.
• Respond to customer security and compliance questionnaires and monitor supplier risk profiles.

Required Skills

• 7+ years of experience in governance, risk, compliance, or information security.
• 5+ years of direct experience in risk management.
• Functional knowledge of CISSP security domains and industry best practices.
• Experience with SOX and GDPR regulatory requirements.
• Knowledge of ISMS governance models and analysis of SOC, CAIQ, and ISO 27001 certification reports.
• Demonstrated experience in controls definition, development, implementation, and assessment.
• Bachelor's degree.

Preferred Skills

• Strong project management and organizational skills.

Key Skills

Education

Bachelor's degree