Security GRC Specialist

Orange provides your personalized go-to pool of strategy planners, creatives, and technologists for your brand and campaign that aren't part of your daily routine. Strategic managers, content specialists, conceptual creatives, producers, SEO experts, product managers, and others are among the impact players who are held match-fit for your brand.

About The Job:

We are looking for an expertise in security governance frameworks. Strong skills in risk assessment and compliance monitoring. Proven experience in designing and implementing GRC processes.

Job Descriptions

1. Perform regular security assessment and audit of the product and the enterprise.
2. Develop and continuously improve security policies and procedures.
3. Design, plan, develop and deploy security awareness program.
4. Evaluate applicable government regulations and security standards, and plan the implementation in the company.
5. Drive security initiatives together with compliance and other technology team.
6. Create daily and monthly reports.
7. Collaborate with others security team to resolve security issues, incidents, and awareness.
8. Participate in PCI DSS and ISO 27001 audit.

Requirements

1. Minimum 3 years’ experience in Information Security.
2. Computer science/engineering bachelor degree from reputable university.
3. Good communication skills, able to explain technical language to business users.
4. Team player, able to work together with peers in the technology team and other employees.
5. Experienced in assessing application development and security processes.
6. Experienced with financial technology applicable government regulations.
7. Have a good knowledge in ISO 27001 and PCI DSS requirements.
8. Understand the concept of cloud security.
9. Good in written, verbal communication and presentation skills.
10. Desired Certifications: CISA, ISO 27001 LA, CISSP, CISM, CRISC.