Responsible:

Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the organization's systems, processes, and policies.
Develop and implement risk mitigation strategies and controls to minimize the impact of identified risks.
. Stay abreast of evolving security frameworks, regulations, and standards, such as ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
Collaborate with cross-functional teams to integrate security requirements into business processes and technology solutions.
Assist in the development and implementation of security policies, procedures, and guidelines to ensure alignment with regulatory requirements and industry best practices.
Serve as the primary point of contact for Data Protection Officer (DPO) duties, including overseeing data protection activities, ensuring compliance with relevant data protection regulations, and acting as a liaison between the organization and regulatory authorities or data subjects.
Provide guidance and support to internal stakeholders on security and compliance-related matters.
Conduct regular audits and assessments to monitor compliance with established security policies, procedures, and standards.
Develop and deliver training programs to raise awareness of security risks and compliance requirements among employees.

Qualifications:

Bachelor's degree in Computer Science, Information Security, or related field (or equivalent work experience).
Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or equivalent.
Extensive experience of at least 3-5 years in performing Risk Assessment and delivering compliance standards across diverse environments, from SME to Enterprise.
Excellent written and verbal communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
Ability to work independently, manage multiple projects simultaneously, and meet tight deadlines.
Strong problem-solving skills and attention to detail.
A commitment to staying up to date with the evolving cybersecurity landscape.

Senior Consultant, GRC