The Cyber Security Governance Specialist will be a subject matter expert in cyber security governance and assurance to work with a wide range of stakeholders to ensure successful implementation of associated activities.
The purpose of this role is to focus on the governance of cyber and operational technology
Required skills and competencies:
- In-depth knowledge and understanding of Operational Technology
- Industry qualification such as a CISSP, CISM, CRISC, CISA, PCI-QSA and ISO27001 LA/LI
- Senior GRC consultancy experience
- Experience in assessing cyber maturity and identifying improvement areas in a corporate environment. Conducting security audits and assessments, creating and implementing compliance programs, and working with external auditors.
- Proficiency in various security technologies, tools, and technologies. Including of network security, firewall technologies, intrusion detection and prevention systems (IDS/IPS), vulnerability assessment tools, security information and event management (SIEM) systems, and data loss prevention (DLP) solutions
- Strong business-facing skills, with the ability to engage and collaborate with stakeholders at various levels within the organisation.
- Familiarity with working directly with cyber and security working groups.
- Proficiency in facilitating and evaluating divisional cyber assessments.
- Ability to provide actionable recommendations for cyber uplift and prepare associated reports for oversight.
- Expertise in developing and implementing Information Security Management Systems (ISMS) based on established frameworks. ISO27001, NIST CSF (Desirable). ACSC ISM (Desirable)
- Expertise in Operational Technology standards like, ISA/IEC 62443.