Cyber Security Governance, Risk and Compliance (GRC) Senior Specialist

We are looking for Cyber Security GRC Senior Specialist for our company!

Department: Cyber Security.Job Purpose:Provides general GRC cybersecurity support.Perform cybersecurity tasks.Identifies, assesses, and manages an organization’s cybersecurity risks protecting its information and technology assets in line with organizational policies and procedures and related laws and regulations.Develop cybersecurity policies and related documentation.Review existing and proposed policies and related documentation with stakeholders.Work with stakeholders to develop cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy.Ensures an organization’s cybersecurity program complies with applicable requirements, policies, and standards.Develops, updates, and maintains cybersecurity policies to support and align with an organization’s cybersecurity requirements.Help analyzes cybersecurity controls and assesses their effectiveness.Participate in cybersecurity audits to assess an organization’s compliance with applicable requirements, policies, standards, and controls.

Assist in preparing audit reports and communicating them to authorized parties.Help evaluate cybersecurity aspects of contracts to ensure compliance with regulatory requirements.Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation.Support in reviewing cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.Help in Developing the methods to effectively monitor and measure risk, compliance, and assurance efforts.Maintain knowledge of applicable cybersecurity defense policies, regulations, and compliance documents as they pertain to cybersecurity defense auditing.Provide support to compliance activities as necessary.Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance.Conduct Cybersecurity risk assessment on applications, new services, when obtaining third party services.NCA, ISO 27001

Qualifications

Bachelor’s degree in computer science, Cyber Security, Computer Engineering, Information TechnologyA minimum of 5 years of relevant experience