- Provide expertise on compliance with internal and ITÂ Security policies and governance controls (e.g., ISO27001, ISO27019, NIS-R, CAF).
- Be accountable for technical and non-technical risk assessments, monitoring compliance, and recommending technical controls.
- Ensure timely resolution of internal and external audit actions.
- Ensure IT Business Continuity planning, collaborating with Emergency Planning and Business Services.
- Regularly review IT policies, processes, and standards, recommending cost-effective actions and controls.
- Manage IT Security vendors, suppliers, contractors, and the Managed Security Service.
- Collaborate with peers within the Cyber Security team on regulatory and project assurance, managing audits, and assessing risks.
- Develop IT Cyber Security reporting, promoting policy and governance awareness.
- Continuously improves IT Security Risk processes and compliance initiatives.
- Experience in delivering information security certification and maintaining compliance.
- Experience in creating and reviewing IT security policies.
- High-level understanding of operational technology systems and their risks.