Job Description For Cyber Risk & Data Privacy

I) Cyber / IT / Technology / Application / Information Security Risk

• Strategy: Define and implement cybersecurity and information security strategies

aligned with business objectives. Establish frameworks, KRIs, KPIs, and dashboards

for Lines of defence.

• Risk Management: Conduct assessments, identify gaps, score risks, and recommend

mitigations and improvements using industry standards and controls. Evaluation of

information security threats and their impact to clients IT environment.

• Testing & Maturity: Evaluate ISMS controls, test operating effectiveness, and provide

maturity analysis.

• Stakeholder Engagement: Collaborate with executives and IT teams; communicate

complex concepts clearly to non-technical audiences.

• Governance & Compliance: Implement robust GRC structures ensuring adherence to