Senior Specialist - Cybersecurity GRC

Position Overview

We are seeking a highly skilled and experienced Senior Specialist - Cybersecurity GRC to join our team and play a pivotal role in strengthening our cybersecurity governance, risk management, and compliance (GRC) framework. In this critical position, you will be responsible for developing, implementing, and continuously enhancing robust cybersecurity policies, procedures, and controls that align with NIC requirements, regulatory mandates, and international standards. Your expertise will ensure that our organization maintains a strong security posture while providing executive leadership with clear, actionable insights into cybersecurity risks and compliance status. This role is ideal for a proactive professional with a deep understanding of cybersecurity frameworks and a passion for driving continuous improvement in security maturity.

Key Responsibilities

The Senior Specialist - Cybersecurity GRC will be accountable for the following core functions:

• Policy Development and Maintenance: Collaborate with cross-functional teams to develop, update, and maintain comprehensive cybersecurity policies and procedures that fully comply with NCA requirements and other applicable regulations. Ensure these policies remain current and effective in addressing evolving threats and organizational needs.
• Risk Management and Compliance: Lead and support risk management initiatives, ensuring that cybersecurity risks are identified, assessed, and mitigated in accordance with local regulations and international standards such as ISO 27001, NIST, or other relevant frameworks. Facilitate compliance activities to maintain alignment with regulatory obligations.
• Policy Review and Continuous Improvement: Conduct periodic reviews of cybersecurity policies, procedures, and controls, with a minimum annual assessment or following significant organizational or operational changes. Identify gaps and recommend enhancements to bolster security maturity and resilience.
• Executive Reporting and Stakeholder Communication: Prepare and deliver comprehensive reports to senior management and the Board of Directors, providing transparent visibility into cybersecurity risks, compliance status, and strategic recommendations for risk mitigation and improvement.
• Governance and Maturity Enhancement: Drive the development and execution of continuous improvement plans to elevate cybersecurity governance standards and overall security maturity across the organization. Monitor progress and report on key performance indicators.
• Stakeholder Coordination and Training: Work closely with internal stakeholders, including IT, legal, and business units, to ensure cybersecurity policies are effectively communicated, understood, and implemented. Provide guidance and training to foster a culture of security awareness and compliance.
• Audit and Assessment Support: Serve as a key liaison during internal and external audits, providing necessary documentation, evidence, and insights to demonstrate compliance with cybersecurity policies and regulatory requirements.

Talent Profile

To excel in this role, candidates must meet the following qualifications and experience:

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a closely related field. Advanced certifications in cybersecurity governance, risk, or compliance (e.g., CISM, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor) are highly desirable.
• Knowledge and Experience: Minimum of five years of progressive experience in cybersecurity, with a strong focus on governance, risk management, and compliance. A deep understanding of NCA cybersecurity frameworks, policies, and regulatory requirements is essential. Experience in sectors with stringent regulatory oversight is a plus.
• Technical and Soft Skills: Proficiency in cybersecurity frameworks and standards, risk assessment methodologies, and compliance reporting tools. Excellent analytical, communication, and project management skills are required to collaborate effectively with stakeholders at all levels.

Job Nature and Benefits

This is a site-based, project-based position, offering a dynamic and challenging work environment where you can make a tangible impact on the organization’s security posture. In addition to a competitive monthly salary, we provide a comprehensive benefits package, including:

• Social Allowance: Financial support to enhance your overall well-being and work-life balance.
• Mobile Allowance: Coverage for work-related communication expenses to ensure seamless connectivity.
• Medical Insurance: Comprehensive health coverage for the employee, their immediate family, and parents, ensuring peace of mind for you and your loved ones.

Join us and take the lead in shaping the future of cybersecurity governance, risk management, and compliance within our organization. Your expertise will be instrumental in safeguarding our digital assets and maintaining the trust of our stakeholders.