About the role
Requirements:
- Bachelor's degree in engineering/technology in Information Security, Computer Science, IT or a related field.
- At least 8 years of experience in IT or cybersecurity, with hands-on exposure to compliance, audit support and reporting (a GRC or internal audit background is an advantage).
- Working knowledge of regulatory and audit frameworks (GDPR, NIS2 SAP security audits, SWIFT, GITC).
- Mandatory certification: CISA.
- ISO 27001 or CIPM are a plus.
- Language: English (written and spoken).
- Cybersecurity governance, control frameworks and audit evidence expectations.
- Regulatory and industry compliance topics: GDPR, NIS2 SAP security audits and SWIFT compliance.
- User access, Segregation of Duties and identity and access fundamentals (SSO/MFA principles).
- Vulnerability management principles (risk-based prioritisation, remediation lifecycle, reporting) and security awareness platforms such as KnowBe4
- Needed skills (Soft skills required by the position, such as People management, analytical skills, problem solving, . )
- Problem solving, with attention to detail in controls, evidence and documentation.
- Written and oral communication skills; able to explain technical topics to non-technical stakeholders.
- Organisation and planning; able to track many actions through to closure and hold a reporting cadence.
- Microsoft desktop applications (Excel, Word, PowerPoint) and compliance reporting / dashboarding.
- Cross-functional collaboration with IT, OT, Legal & Privacy and business owners; pragmatic and outcome-focused.