Senior Executive IT (Cybersecurity Risk & Policy)

Job Requirements:

• Assist in the development, review, and enforcement of cybersecurity policies, standards, and procedures.
• Support risk assessments, gap analyses, and control effectiveness reviews across IT and OT systems.
• Monitor compliance with regulatory frameworks (ISO 27001, NIST, GDPR, local aviation/critical infrastructure standards).
• Contribute to third-party/vendor risk assessments and compliance checks.
• Maintain and update risk registers, compliance dashboards, and audit documentation.
• Utilize GRC tools (e.g., Archer, ServiceNow GRC, MetricStream, or similar) for risk tracking, reporting, and workflow automation.
• Collaborate with IT, OT, and business teams to ensure policy adoption and risk mitigation.
• Track and report on emerging threats, regulatory changes, and industry best practices.
• Support awareness and training programs to strengthen organizational security culture.