Overview
As a key member of our organization's cybersecurity team, you will play a crucial role in enhancing our overall security posture and promoting compliance with industry standards.
Responsibilities
- This position is responsible for developing, maintaining, and advising on comprehensive cybersecurity governance frameworks that align with international standards (ISO / IEC 27001, 27701, 22301, TISAX, NIS2).
- You will support cross-functional teams in integrating robust security controls into our business processes to ensure seamless operation and minimal risk.
- Conduct regular internal security assessments and compile detailed documentation for external audits to demonstrate our commitment to transparency and accountability.
- Monitor non-conformities and implement corrective actions promptly to maintain regulatory compliance.
- Develop, enforce, and maintain up-to-date security policies and procedures across all business units to foster a culture of security awareness.
- Perform risk assessments, evaluate existing controls, and contribute to the continuous improvement of mitigation plans to minimize potential threats.
- Support the development and implementation of Business Continuity Management frameworks to ensure seamless operation during disruptions.
- Conduct thorough Business Impact Analyses (BIA) and align continuity plans with our overall risk management strategy to maximize resilience.
- Evaluate adherence to data protection regulations (e.g., GDPR) and internal security standards to ensure we remain compliant and competitive.
- Collaborate with relevant stakeholders to develop and implement certification programs and regulatory initiatives that drive innovation and excellence.
- Maintain high-quality compliance documentation to facilitate efficient decision-making and minimize risks.
- Provide regular reports to the cybersecurity steering committee and other stakeholders to ensure everyone remains informed and aligned.