Governance, Risk & Compliance Manager / Infosec

KEY ACCOUNTABILITIES

1. Manage the information technology and cybersecurity risk management process and make sure there is ongoing risk reduction.
2. Review security and compliance assessments on new and existing systems, processes, and technology.
3. Oversee the communication with various business units to ensure controls are adequate, appropriate, and effective.
4. Conduct Cyber Security and Information technology risk assessment.
5. Review information technology and cybersecurity risks mitigation plans, and periodically update risk register.
6. Manage periodic gap assessments against Cyber Security standards to validate compliance on an ongoing basis.
7. Manage and review Information Security policies, procedures, and plans updates.
8. Insure Engaging in new proposed projects to identify potential information technology and cybersecurity risks.
9. Review (governance, risk, and compliance) activities to ensure the implementation of security controls, exceptions, and risk mitigation.
10. Oversee the Development of Information Security policies to support AAIB s information Security governance and compliance objectives.
11. Review and validate Compliance with CBE Conditional approvals related to information Security.
12. Provide Consultation for design and implementation of the GRC platforms.
13. Ensure Implementing the Cyber Security related Controls for local and international security regulations.
14. Validate risks in RCSAs and their related security controls for new and existing AAIB Projects/Products.
15. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant legislative/procedural requirements are fulfilled
16. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures.
17. Supervise the day to day operations of the team providing some guidance in the related area, encouraging teamwork, innovation, recommending new approaches and facilitating related professional work processes in order to achieve high performance standards.
18. Liaise with internal and external parties at the appropriate levels to ensure smooth flow of interactions.

QUALIFICATIONS, EXPERIENCE & SKILLS

• Experience with IT governance, risk, and compliance management in a large global environment
• Minimum of 7 - 10 years of experience
• Preferred certification: CRISC, CISM, CISA
• Excellent Knowledge of ISO 31000's risk management principles; ISO/IEC 38500 (corporate governance of information technology)
• Good knowledge of implementing and using GRC tools.
• Experience in implementing and operating an ISMS aligned to ISO/IEC 27001
• Experience in Cyber security and IT Risk standards ISO 27005.
• Knowledge of Information Security management frameworks ex: NIST 800-30 and compliance practices.
• Develop security policies and guidelines based on best practices and industry standards.

Skills:

• Excellent communication and leadership skills.
• Ability to handle high pressure situations with key stakeholders.
• Good Analytical skills, Problem solving and Interpersonal skills.
• Working knowledge and experience with MS office