
Governance, Risk and Compliance Specialist
Salary undisclosed
Checking job availability...
Original
Simplified
- Total 10 Years of experience out of which at least 5 years relevant experience in ICT cybersecurity, data security, audit management, governance, risk and compliance management
- Relevant certifications in IT governance, IT audit, cyber or data security (e.g. CISSP, CISM, CISA, etc.) preferred.
- Ability to work with cross-functional, multi-disciplined team to operationalise monitor security policies and procedures.
- Knowledge of Instruction Manual 8 and CSA Cybersecurity Code of Practice preferred.
- Technical knowledge of security vulnerabilities, validation of remediations and risk assessments.
- Relevant experience in data visualisation and analytics.
- Develop the culture of Tech risk governance and management across the organisation, and ensure proper accountability in the management, tracking and reporting of tech and cyber risks.
- Provide subject matter advice to internal stakeholders on cyber security requirements
- Review and establish ICT policies and process controls and conduct compliance checks.
- Support team lead and work with internal stakeholders to:
- Work with Application System Managers to maintain a high degree of operating hygiene such as assisting in annual password change, assess and resolve vulnerabilities in security scans, vulnerabilities in penetration testing, OS patching, etc.
- Collaborate with Application System Managers to conduct risk assessment for the applications within the divisions; ensuring they adhere to the Instruction Manual 8 and applicable cyber clauses.
- Recommend the re-engineering and streaming of processes to enhance effectiveness of controls implemented.
- Present management reporting to stakeholders, with analysis of data and trends, and recommend next steps.
- Enhance training and other materials in ICT risk management, document case studies and good practices.
- Total 10 Years of experience out of which at least 5 years relevant experience in ICT cybersecurity, data security, audit management, governance, risk and compliance management
- Relevant certifications in IT governance, IT audit, cyber or data security (e.g. CISSP, CISM, CISA, etc.) preferred.
- Ability to work with cross-functional, multi-disciplined team to operationalise monitor security policies and procedures.
- Knowledge of Instruction Manual 8 and CSA Cybersecurity Code of Practice preferred.
- Technical knowledge of security vulnerabilities, validation of remediations and risk assessments.
- Relevant experience in data visualisation and analytics.
- Develop the culture of Tech risk governance and management across the organisation, and ensure proper accountability in the management, tracking and reporting of tech and cyber risks.
- Provide subject matter advice to internal stakeholders on cyber security requirements
- Review and establish ICT policies and process controls and conduct compliance checks.
- Support team lead and work with internal stakeholders to:
- Work with Application System Managers to maintain a high degree of operating hygiene such as assisting in annual password change, assess and resolve vulnerabilities in security scans, vulnerabilities in penetration testing, OS patching, etc.
- Collaborate with Application System Managers to conduct risk assessment for the applications within the divisions; ensuring they adhere to the Instruction Manual 8 and applicable cyber clauses.
- Recommend the re-engineering and streaming of processes to enhance effectiveness of controls implemented.
- Present management reporting to stakeholders, with analysis of data and trends, and recommend next steps.
- Enhance training and other materials in ICT risk management, document case studies and good practices.