Cybersecurity Strategy and Governance Sr. Specialist ||

Cybersecurity GRC Senior Specialist

The Cybersecurity GRC Senior Specialist is a pivotal role responsible for driving, maintaining, and enhancing our organization's Cybersecurity Governance, Risk, and Compliance (GRC) framework. This role ensures alignment of cybersecurity initiatives with business objectives, regulatory requirements, and international best practices, fostering our organization's cybersecurity maturity.

• Implement and maintain our organization's Cybersecurity GRC framework.
• Ensure compliance with applicable cybersecurity laws, regulations, and standards, including NCA ECC, ISO/IEC 27001, and NIST Cybersecurity Framework.
• Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
• Conduct cybersecurity compliance assessments and monitor security control implementation.
• Coordinate internal and external cybersecurity audits and regulatory assessments.
• Manage audit readiness activities and track remediation plans.
• Perform cybersecurity risk assessments and collaborate on risk mitigation strategies.
• Support enterprise risk management initiatives related to cybersecurity.
• Prepare compliance reports, risk metrics, and performance indicators for senior management.
• Collaborate with internal stakeholders to ensure effective security control implementation.
• Support incident governance activities and ensure regulatory compliance in incident management.
• Participate in continuous improvement initiatives to enhance governance processes and compliance maturity.
• Monitor emerging cybersecurity regulations, standards, and industry best practices.
• Support cybersecurity awareness and compliance training initiatives.
• Participate in special projects and perform other related duties as assigned.

Qualified candidates will possess a Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, along with a minimum of 4 years of experience in Cybersecurity GRC, Information Security, IT Risk, or related cybersecurity functions. Professional certifications such as CISSP, CISM, CISA, CRISC, or ISO/IEC 27001 Lead Implementer/Auditor are preferred.