Cyber Security Governance Risk and Compliance Lead
Skills
Corporate GovernanceCyber InsuranceCyber Risk ManagementCyber Security RiskCybersecurityISO 27001Regulatory Compliance
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Experience leading cyber governance risk and compliance in a complex organisation
- Strong knowledge of technical cyber assurance and third-party risk management
- Ability to develop and embed governance assurance and risk frameworks
- Experience applying standards such as IASME Cyber Essentials and IASME Cyber Assurance
- Ability to make risk based decisions and advise on risk tolerance
- Understanding of ISO 27001 or contribution to ISO 27001 programmes
Nice to have
- Strategic
- Collaborative
- Analytical
- Influential
- Proactive
Day to day
- Lead the organisation's cyber governance risk and compliance operating model and embed technical assurance across the DDaT function
- Define governance and assurance processes that strengthen cyber security across internal systems and the third-party supply chain
- Assess high impact risks advise on risk tolerance and escalate issues using informed risk-based judgement
- Support the longer term move toward ISO 27001 by integrating technical assurance practices into wider organisational security work