about the job. 1. Governance: - Develop and maintain a comprehensive cybersecurity governance framework, including policies, procedures, and standards. - Establish and manage cybersecurity risk appetite and tolerance levels. - Oversee the development and implementation of a cybersecurity risk management program. 2. Risk Management: - Conduct risk assessments to identify, analyze, and prioritize cybersecurity risks across the organization. - Develop and implement risk mitigation strategies and controls. - Monitor and report on the effectiveness of risk mitigation efforts. 3. Compliance: - Ensure compliance with relevant cybersecurity regulations and standards, such as GDPR, PCI DSS, NIST Cybersecurity Framework, and ISO 27001. - Maintain documentation and evidence to support compliance activities. - Conduct internal audits and assessments to ensure compliance with policies and regulations. - Stay abreast of evolving cybersecurity regulations and industry best practices. 4. Stakeholder Engagement: - Collaborate with business units to understand their cybersecurity needs and risks. - Communicate cybersecurity policies, risks, and compliance requirements effectively to stakeholders. - Partner with IT teams to implement technical controls and security measures. 5. Incident Response: - Develop and maintain incident response plans and procedures. - Coordinate and assist with incident response activities as needed.
skills and experience required. 1. Bachelor's degree in Computer Science, Cybersecurity, Information 2. Technology, Business Administration, or a related field. 3. Minimum of [1-3 years] experience in a cybersecurity role with a focus on governance, risk, and compliance. 4. Deep understanding of cybersecurity frameworks, standards, and best practices, including ISO 27001, NIST Cybersecurity Framework, and relevant regulatory requirements. 5. Proven experience conducting risk assessments, developing mitigation strategies, and implementing security controls. 6. Excellent written and verbal communication skills with the ability to communicate technical information effectively to both technical and non-technical audiences. 7. Strong analytical and problem-solving skills. 8. Ability to work independently and as part of a team.
Preferred Qualifications: - Relevant industry certifications (e.g., CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, etc.)
