Join a leading cybersecurity team dedicated to protecting organizations and their valuable assets. We focus on building secure, vigilant, and resilient strategies that not only prevent and respond to cyber threats but also manage cyber risk to unlock new opportunities. This role emphasizes embedding cyber risk management into the core of strategy development for effective information and technology risk mitigation. Explore the dynamic world of Cybersecurity with us.

Cultivate strong relationships with CISOs, CIOs, senior management, business units, auditors, and external partners to advance cybersecurity objectives. Implement and uphold ISO/IEC 27001:2022 compliant Information Security Management Systems (ISMS) and Governance, Risk, and Compliance (GRC) frameworks, encompassing risk assessments, control alignment, policy creation, and audit readiness. Conduct comprehensive cybersecurity risk, control, and maturity evaluations, maintaining risk registers and steering remediation efforts. Facilitate internal and external audits by managing evidence, validating controls, addressing findings, and ensuring closure. Perform Third-Party Risk Assessments (TPRA) and cybersecurity due diligence for vendors, clients, and collaborators. Develop and revise information security policies, standards, processes, and procedures to align with regulatory and contractual mandates. Support Business Continuity Management Systems (BCMS), cyber resilience, security awareness programs, and overall governance initiatives. Prepare essential reports for CISO and management, including risk dashboards, audit updates, security posture analyses, and remediation status.

A Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline is required. Demonstrable experience in Cybersecurity Governance, Risk & Compliance (GRC) and Information Security Management is essential. Proficiency with ISO/IEC 27001:2022, ISMS implementation, risk management methodologies, and security controls is necessary. Practical experience in coordinating audits, conducting third-party risk assessments, developing policies, and tracking remediation activities is key. Strong abilities in stakeholder engagement, meticulous documentation, effective communication, and clear reporting are expected. A solid understanding of contemporary cybersecurity technologies and security operations principles is important.