Job Description

Job Title Associate Information GRC

Description

KEY ROLE SPECIFIC ACCOUNTABILITIES:

Description of the Accountability

Performance Indicators (How accountability is measured)

Manage and maintain the Risk Assessment Framework.

Regular inputs on how to improve the IT Risk framework.

Provide reporting and risk metrics of the risk management activity.

Monthly reporting of risk management activities.

Validate, track and maintain third party risk assessment as per cycle.

Risk reporting and management for each business unit or area of activity.

Manage risk for digital, technology operations and information security.

BISO role supported in communicating risk to their respective lines of business.

Support all security and compliance initiatives for business entities.

Assisting the businesses in understanding IT risk and how best to manage it.

Conduct and report risk assessment and compliance checks as per cycle.

Risk register regularly updated

Provide security and privacy oversight on projects and change requirements for business to ensure appropriate security protection is delivered as part of solution.

Assigned infosec activities within scheduled timelines and track it on PoL (( 90%).

Manage the relationship between information security function and LoB EIT.

Establish quarterly sessions with the LoB EIT for reporting and metrics, emails and MoM to be stored on infosec sharepoint folder.

Requirements

1. 6. PERSON SPECIFIC:

Education:

Diploma/Degree in Comp Sci or equivalent. Should have certifications from recognized security certification bodies such as ISACA, ISC2, etc.

Minimum Experience and Knowledge:

Minimum of 5 years of experience in the IT or Digital risk domain and Information Security domain in a technical, development or assurance role.

Experience working with broad range of common enterprise technologies and security standards and frameworks such as ISO27000, NIST CSF, NESA.

Job-Specific Skills:

Base experience in technology, digital or risk departments and have managed the overall Digital Risk Management and Governance life-cycles.

Knowledge in security, infrastructure and application architecture (Cloud and On-premise), Operating Systems, Networks, Secure Coding standards, software assurance, threat and vulnerability management, MS Azure, Office 365, and third-party security assurance

Soft Skills

Excellent team player and go-to person. Must be able to manage stakeholders across multiple business units and articulate security and privacy risks in simple language.

2. COMPETENCIES:

Leadership:

- Engagement with business with ability to influence

- Engagement with horizontal teams in IT

Functional:

- Expert

Risk Management

IT Security Management

- Advanced

Cyber Security

Systems Development

Infrastructure, Networks and Cloud

Solution design

- Proficient

IT Service Management

IT Project Management

IT Vendor Management

- Developing

SDLC and Software Assurance

Installation and Deployment
13 or more years of experience in project management in IT and business/industry 5 to 8 years of managing projects and taking leadership responsibilities 3 years of managing teams Demonstrated experience in leading diverse teams Bachelor\'s or master\'s degree in computer science, information systems, business administration or related field Certified in Project Management (PMP or Prince) Preferred to be a scrum master or carries an agile certificate.

You have applied correctly

A message has been sent to the employer, you are going to receive the reply soon. Good luck!

You have applied correctly

The request has been sent correctly. However, we have seen that your resume is incomplete. We highly recommend you to fill it to let the employer know you. These are the fields you have empty: