GRC Security Specialist

GRC Security Specialist - 12-month contract (agency's payroll) - renewable

The day-to-day tasks of this positions looks like:

• Improve existing policies, standards, procedures and guidelines.
• Drafting new security playbooks/SOP, and create security advisory and bulletins.
• Prepare KRI and Near-Miss KRI for review and submission, as well as coordinatr IT Risk Register review and submission very bi-annually.
• Provide consultancy and advisory for various IT projects and support and involve in internal and external audits.
• Lead and drive towards ISO27001 and CSA Trust Mark. Evualate and deploy GRC tooling optimize current reporting and tracking.
• Review and assessment CSA, RA, security checklist, Pre-architecture review, firewall review and non standard software installation review.

The ideal fit will meet the following requirements:

• Conduct cyber risks assessment in support of technology intiatives to help identify IT relaated risks and determines appropriate controls to mitigate risks.
• Familar with NIST CSF, CIS, PSPA
• Experience in ensuring cyber security standards and policies, and apply a defined set of analytical methods, ability to work independently.
• Able to demonstrate knowledge in using cyber security monitoring and analysis tools and techniques.
• Experience in handling documentation of cyber risks assessment reports
• Able to fulfill the following 5 keys pointers:

1. Develop Cyber Risk Doucmentation
2. Implement Cyber Risk Strategy
3. Mitigate Cyber Security Risks
4. Establish Cyber Security standards and policies
5. Manage Cyber risks and assessments.

This role is a contract position under The Edge's payroll, and it is convertible into permanent position during or after the contract duration.