- Provide guidance and share best practices for design and implementation of the GRC platforms.
- Ensure partnership with different teams for Proactive Compliance Risk Management - identification, assessment, risk action planning. Implements local and international security laws and regulations.
- Implements security controls, risk assessment framework, and programs that align to regulatory requirements, standards.
- Evaluates risks and develops security standards, procedures, and controls to manage risks.
- Implements GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing.
- Develops reporting metrics, dashboards, and evidence artifacts.
- Documents and reports control failures and gaps to stakeholders. ·
- Provides remediation guidance and prepares management reports to track remediation activities.
Requirements
- Bachelor's degree in Computer Science or equivalent
- +2 Years of experience in relevant scope.
- Strong knowledge in user awareness programs
- Strong knowledge of program development
- Strong knowledge of compliance and regulatory standards
- CBE standards
- NIST standards
- ISO Standards PCI-DSS