Key Responsibilities

Risk Management & Assessment

Conduct enterprise-wide cybersecurity risk assessments using frameworks like FAIR and OCTAVE
Maintain and update cybersecurity risk registers and remediation plans
Monitor key risk indicators (KRIs) and compliance metrics
Support third-party/vendor risk assessments and security evaluations
Evaluate effectiveness of security controls across business processes

Compliance & Audit Management

Lead internal and external cybersecurity audits and control assessments
Support regulatory inspections and audit engagements with documentation and evidence
Collaborate with internal audit and external regulators
Ensure timely closure of audit findings and remediation actions
Maintain audit readiness across IT systems and processes

Policy & Governance Management

Incident Response & Business Continuity Support

Stakeholder Management & Reporting

Strategic Security Support

Continuous Improvement

Senior Cybersecurity Risk & Compliance Specialist