Specialist & Governance & Risk & Controls

Tower Group South Africa (PTY) Ltd; Midrand; On-site; ZAR 200 000 - 300 000; Full time

Job summary

A leading cybersecurity firm in Gauteng is looking for an expert in cyber risk management. The successful candidate will evaluate and ensure adherence to cybersecurity policies, promote awareness of security governance across the organization, and manage risks through compliance assessments. This role requires excellent communication skills for training stakeholders and the ability to develop comprehensive risk strategies.

Qualifications

• Proactive approach to evaluating cyber security policies.
• Experience in managing cyber risk and compliance.
• Ability to communicate and train stakeholders effectively.

Responsibilities

• Evaluate and ensure adherence to cyber security policies.
• Promote cyber security awareness and governance.
• Manage risks and compliance assessments.

Job description

Key accountabilities and decision ownership:

• Take a proactive approach to ongoing evaluation of cyber security policies to ensure security policy adherence
• Promote awareness of security policies, training, and the governance strategy amongst all levels of the organization to ensure sound security governance is reflected across the organization
• Assess policy needs, train stakeholders in the policy lifecycle and clearly communicate expectations, collaborate with stakeholders from subject matter experts to senior leaders to develop and manage security content
• Maintain and further develop the Cyber Risk Management Program
• Actively manage risks on the Cyber Risk Register from intake to resolution
• Communicate risk assessment findings with key stakeholders to develop and monitor risk remediation plans
• Develop cyber risk portfolios to provide a more holistic view of teams’ risks
• Conduct regular compliance assessments with the Business to ensure that current and emerging risks are being monitored and managed
• Proactive Control design and implementation guidance provided to the Business
• Process and Control Compliance Monitoring and Reporting
• Cyber audit SPOC to the business with guidance on all audit submissions
• Cyber audit report reviews and guidance to Management on the recommended actions
• Tracking and monitoring of audit remediation action implementation
• Deploying cyber security awareness training collateral with innovative approaches
• Design of status reports as well as insight reporting as and when required by Management
• Lead reporting development with the use of automation and reporting tools to generate Cyber Risk metrics, i.e. KPI’s, KRI’s, KGI’s (KxI)