Job Description:
- A minimum of 10 years of experience in cyber security roles within major organisations, focusing on management of governance, risk, and compliance.
- Relevant industry certification(s) such as CISSP, CISM, CRISC, CISA, ISO/IEC 27001 Lead Implementer/Auditor and/or relevant industry experience
- Comprehensive understanding of industry-wide security standards and compliance frameworks such as ISO/IEC 27001, NIST, PCI DSS, HIPAA, GDPR etc.
- Significant experience in the development and implementation of information security management systems, policies, and standards.
- Significant experience in the development and implementation of security control assurance programs.
- Significant experience in the development and implementation of supply chain risk assessment frameworks.
- Demonstrated familiarity with contemporary security technologies and products.
Specific accountabilities for this role include:
· Support the delivery and continuous improvement of the Information Security Management System (ISMS), including governance policies, standards, and processes, to ensure that cyber security risks are appropriately managed.
· Conduct Cyber security self-assessment and controls assurance exercises designed to assess whether key controls are operating effectively and consistently, including auditing of internal cyber security controls and assessment of 3rd party/supply chain risk exposure.
· Undertake Cyber security risk advisory or strategy services designed to identify, evaluate, report on, and remediate cyber security risk.
· Cyber security risk management and reporting.
Originally posted on