Cyber Governance Risk & Compliance Lead
Core
Lead the implementation, operation, and continual improvement of an Information Security Management System (ISMS) and drive ISO/IEC 27001 certification.
Role type
Senior Cyber Governance, Risk & Compliance (GRC) Lead
Builds
Information Security Management System (ISMS) and ISO 27001 compliant security posture
Domain
Cybersecurity Governance, Risk, and Compliance
Required skills
ISO/IEC 27001 certification program leadership, ISMS establishment and maintenance, cyber risk management frameworks, risk register management, stakeholder engagement, policy and procedure development, third-party risk management, audit coordination, security performance reporting
Preferred skills
ISO/IEC 27001 Lead Implementer or Lead Auditor certification, CISSP, CRISC, CISA, NIST Cyber Security Framework, Essential Eight, privacy and data governance practices
Technologies
ISO/IEC 27001, NIST Cyber Security Framework, Essential Eight
Responsibilities
Lead end-to-end ISO/IEC 27001 certification program, develop and review security policies and standards, manage third-party and supply chain cyber risk programs, maintain cyber risk register and oversee risk treatment, report on security risks and audit outcomes to senior leadership
Seniority
Senior, hands-on IC