Deputy Manager - Cyber Security

Purpose/Objective

The GRC Specialist is responsible for supporting the organization's security governance, conducting risk analysis, ensuring compliance with global regulations, and assisting in security audits.
This role works closely with various teams to integrate risk management practices into daily operations.

Key Responsibilities of Role

GRC Specialist Governance & Compliance Strategy: Assist in the implementation of IT security governance frameworks and industry standards.
Monitor evolving regulatory landscapes and assess their impact on business operations.
Support the creation of policies governing data security, access controls, and incident response.
Work with compliance teams to ensure audit readiness.
Risk & Incident Management: Identify and document operational, IT, and cybersecurity risks.
Analyze historical risk trends and develop proactive mitigation strategies.
Participate in business continuity and disaster recovery planning.
Maintain a risk register and ensure timely mitigation of identified vulnerabilities.
Internal Audits & Process Optimization: Assist in planning and executing internal audits for security, IT, and compliance areas.
Identify gaps in internal controls and provide recommendations for improvement.
Develop reporting mechanisms to track compliance performance.
Collaborate with process owners to refine governance workflows.
Security Training & Collaboration: Conduct awareness sessions to educate teams on compliance obligations.
Develop training content to enhance security best practices within departments.
Act as a liaison between security, IT, and business teams to drive GRC objectives.
Contribute to knowledge-sharing initiatives to improve organization-wide security culture.
Key Stakeholders - Internal Information Security Team Risk & Compliance Teams Business & IT Process Owners Key Stakeholders - External Regulatory Bodies External Auditors Third-Party Security Consultants

Technical Competencies

Application Security Management-CYS,Cybersecurity Governance & Compliance-CYS,IT Audit & Control Management-CYS,Risk Management & Threat Modelling-CYS,Security Operations & Incident Response Management-CYS

Qualifications and Experience

Educational Qualification: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Advanced degree (e.
g.
, Master's, MBA) in Cybersecurity, Information Assurance, or a relevant discipline is highly desirable.
Certification: Certifications: CISA, CRISC, ISO 27001 Foundation, Security+ (CompTIA).
Work Experience (Range of years): 5+ years in GRC, compliance management, IT risk assessment, or audit functions.