Security Risk Specialist  

Supports the Head of Security GRC in identifying, assessing, and mitigating cybersecurity risks. This includes conducting periodic risk assessments, quantifying cyber risks, and ensuring that risk management efforts align with the organization's business objectives.

Security Governance

• Develops and updates the organization's cyber risk strategy aligned with business objectives
• Assists in updating and maintaining the Security Service Catalog relevant to risk management services.
• Supports the planning and execution of Security Awareness, Education and Training exercises.
• Maintains and drives periodic updates of the Risk Register across all teams
• Creates and reports on risk metrics and key performance indicators to the Head of Security GRC.

Security Risk

• Acts as the main point of contact for Cyber Risk Quantification, providing actionable insights for decision-makers.
• Conducts periodic Cyber Risk Assessments, ensuring timely completion.
• Develops and oversees the implementation of risk treatment plans for acceptable risk reduction based on assessment outcomes

Security Compliance

• Creates, updates, and ensures compliance with the Cyber Security Risk Framework.
• Conducts targeted risk assessments to evaluate the effectiveness of compliance controls.
• Creates specialized risk dashboards and reports for executive-level consumption.

• Bachelor’s Degree or any 4-year related course.
• A master’s degree in Business or Computer science is an advantage.
• At least 3 years’ experience in security governance, risk, compliance, or audit. Previous experience in OT environments is a plus
• Experience leading small teams is an advantage but not required
• Demonstrated experience in managing risk-related projects.
• Professional security certifications like CISSP, CISA, and CISM are preferred but not required. FAIR/CRISC certifications are a plus