IT GRC Security Specialist

Our client is an international tech consulting company with +25 years of experience offering solutions to support companies' businesses and digital transformation.

Responsibilities :

• Support the Information Security Officer (ISO) in rolling out the companys cybersecurity strategy and program.
• Assist in the development and deployment of a risk management framework that aligns with corporate objectives and policies.
• Ensure cybersecurity risk practices are integrated with the organizations overall risk management structure.
• Offer expert guidance on risk identification, assessment, and mitigation within both IT and OT environments.
• Evaluate the effectiveness of existing security controls across technical infrastructures.
• Continuously monitor cyber risks by assessing controls, asset vulnerabilities, threat landscapes, and security incident data.
• Provide regular updates on emerging risks and trends to risk owners and relevant governance bodies.
• Create and maintain comprehensive security documentation, including policies, processes, guidelines, contractual clauses, and control libraries.
• Design and maintain a harmonized IT / OT security architecture aligned with long-term cybersecurity goals.
• Build a centralized repository of security architecture components such as principles, terminology, service models, frameworks, and reference standards.
• Assist operational teams in identifying cybersecurity needs and risks in new services, systems, and development initiatives.
• Lead awareness and training programs to build a security-first culture across all levels of the organization.
• Supply evidence of risk oversight and control implementation for audits and compliance reviews.
• Report on the status and development of security initiatives to key business stakeholders.

Ensure adherence to security architecture principles and standards.

Requirements :

Familiar with relevant regulatory standards, including GDPR, NIS2, etc.

Skilled in conducting audits, risk assessments, and control validations.

Willingness to travel.