Epicareer Might not Working Properly
Learn More
P

Cyber Security GRC Specialist

$ 300 - $ 500 / month

Checking job availability...

Original
Simplified

Job Description

  • Develop and maintain cyber security policies, procedures and standards in alignment with industry frameworks (e.g. ISO 27001, NIST Cyber Security Framework).
  • Identify, assess and document cyber security risks to the organization - develop and maintain risk registers and implement mitigation strategies.
  • Ensure the organization's adherence to relevant regulations, standards and frameworks (e.g. PDPC) conduct regular compliance audits and provide recommendations for remediation.
  • Collaborate with incident response teams to establish protocols for managing and reporting cyber security incidents.
  • Act as a liaison between technical teams and business units to align cyber security practices with organizational goals.

Requirements

  • Degree in Cyber Security, Information Technology or related fields with ideally at least 3 years of relevant experience in a cyber security or GRC-related roles.
  • Good working knowledge of security risk management, security governance framework and compliance, vulnerability management (vulnerability assessment, penetration testing) and security incident response and security assessment.
  • Strong understanding of ISO27001 standards and NIST Cyber Security Framework.
  • Strong understanding of Disaster Recovery, Business Continuity and IT Regulatory Compliance.
  • Professional certifications would be an added advantage e.g. CGRC (ISC2) and CRISC (ISACA).

Job Description

  • Develop and maintain cyber security policies, procedures and standards in alignment with industry frameworks (e.g. ISO 27001, NIST Cyber Security Framework).
  • Identify, assess and document cyber security risks to the organization - develop and maintain risk registers and implement mitigation strategies.
  • Ensure the organization's adherence to relevant regulations, standards and frameworks (e.g. PDPC) conduct regular compliance audits and provide recommendations for remediation.
  • Collaborate with incident response teams to establish protocols for managing and reporting cyber security incidents.
  • Act as a liaison between technical teams and business units to align cyber security practices with organizational goals.

Requirements

  • Degree in Cyber Security, Information Technology or related fields with ideally at least 3 years of relevant experience in a cyber security or GRC-related roles.
  • Good working knowledge of security risk management, security governance framework and compliance, vulnerability management (vulnerability assessment, penetration testing) and security incident response and security assessment.
  • Strong understanding of ISO27001 standards and NIST Cyber Security Framework.
  • Strong understanding of Disaster Recovery, Business Continuity and IT Regulatory Compliance.
  • Professional certifications would be an added advantage e.g. CGRC (ISC2) and CRISC (ISACA).