GRC Security Specialist - 12-month contract (agency's payroll) - renewable
The day-to-day tasks of this positions looks like:
- Improve existing policies, standards, procedures and guidelines.
- Drafting new security playbooks/SOP, and create security advisory and bulletins.
- Prepare KRI and Near-Miss KRI for review and submission, as well as coordinatr IT Risk Register review and submission very bi-annually.
- Provide consultancy and advisory for various IT projects and support and involve in internal and external audits.
- Lead and drive towards ISO27001 and CSA Trust Mark. Evualate and deploy GRC tooling optimize current reporting and tracking.
- Review and assessment CSA, RA, security checklist, Pre-architecture review, firewall review and non standard software installation review.
The ideal fit will meet the following requirements:
- Conduct cyber risks assessment in support of technology intiatives to help identify IT relaated risks and determines appropriate controls to mitigate risks.
- Familar with NIST CSF, CIS, PSPA
- Experience in ensuring cyber security standards and policies, and apply a defined set of analytical methods, ability to work independently.
- Able to demonstrate knowledge in using cyber security monitoring and analysis tools and techniques.
- Experience in handling documentation of cyber risks assessment reports
- Able to fulfill the following 5 keys pointers:
- Develop Cyber Risk Doucmentation
- Implement Cyber Risk Strategy
- Mitigate Cyber Security Risks
- Establish Cyber Security standards and policies
- Manage Cyber risks and assessments.
This role is a contract position under The Edge's payroll, and it is convertible into permanent position during or after the contract duration.