The experienced Risk Analyst will report to the head of GRC and will support the GRC team in identifying assessing and mitigating risks across the organisation. This role is crucial for maintaining the security and resilience of our information systems.
Key responsibilities
- Assist in conducting security assessments and risk analyses.
- Support the development and maintenance of risk management policies and procedures.
- Help in the preparation and updating of risk registers and asset registers.
- Implementation of risk treatment actions.
- Collaborate with various departments to ensure compliance with global security policies.
- Participate in the continuous improvement of the Information Security Management System (ISMS) by designing and implementing effective metrics.
- Maintain documentation and records related to risk management activities.
- Communicate on the progress of risk management activities and the overall level of security.
Qualifications :
- 3-5 years of experience in information security and risk management.
- Certified on ISO27001 / 27005 and other relevant security frameworks.
- Good knowledge of Cyber and cloud security standard frameworks architecture & design.
- Good knowledge of Compliance frameworks such as SOC 2 NIST.
- Cloud environments: M365 Microsoft Azure SaaS Services.
- Strong analytical and problem-solving skills.
- Excellent interpersonal and communication skills.
- Fluent in English; other languages are a plus.
- Ability to work collaboratively in a team environment.
- Attention to detail and a methodical approach to work.
Additional Information :
Hybrid work 50%
Remote Work :
No
Employment Type :
Full-time