Cyber GRC Manager

Summary

Job Description for GRC Manager

To align with the companys cyber security strategy to meet business objectives and to ensure the new Joint-Venture company cyber security complies to country and industry regulations, best/good practices and company policies.

Key Responsibilities

• To work with business functions to identify critical cyber/data security elements to be governed according to policies
• To continuously engage, communicate, and educate stakeholders to gather feedback and inculcate cyber security governance, risk and compliance principles and practice
• To review business processes and/or systems controls to ensure relevant cyber security controls are implemented to mitigate risk to the business
• To advise and support the companys cyber security steering committee programs and initiatives such as cyber security risk assessment, 3rd party due diligence, 3rd party audit co-ordination, regular cyber security metrics are updated and reported, etc.
• To drive resolutions for audit and cyber assessment findings to achieve effective control implementation
• To drive and foster strong cybersecurity culture ensuring best practices are followed
  
  

• At least 5 years of experience in cyber security/infosec GRC roles
• Familiarity with NIST framework
• Track record in implementing GRC frameworks and compliance programs for corporate and client-facing systems.