Cyber Security GRC Specialist
Share
Job Location:
Monthly Salary:
Posted on:
Yesterday
Vacancies:
1 Vacancy
Job Summary
About The Role
Reporting into the Head of Cyber GRC you will help design operate and continuously improve Sportsbets cyber assurance and risk management activities. You will assess cyber risks and controls perform control design and operating effectiveness testing and provide clear practical advice that helps Technology and Business teams reduce risk while delivering outcomes.
Working alongside and guided by a Senior Cyber GRC Specialist this role has a strong focus on implementing and running a controls assurance and risk management program aligned to the NIST Cybersecurity Framework. You will also assist with external certifications security awareness and third-party reviews partnering with stakeholders across Technology Risk & Compliance and the wider business.
Responsibilities Include:
- Executing a risk-based cyber controls assurance plan aligned to NIST CSF v2.
- Assessing control design and operating effectiveness across systems applications processes and IT General Controls (ITGCs).
- Working closely with a UK-based team to manage cyber security reviews for new vendors.
- Contributing to security awareness activities which includes conducting security awareness training and assisting with creating content.
- Managing control deficiencies end-to-end: validation logging risk assessment remediation planning closure and risk acceptances.
- Leveraging automated assurance tooling (e.g. control monitoring compliance checks evidence collection) to improve assurance coverage and reduce manual effort.
About You
While we are big on development and offer on the job training we want to set you up for success. Along with a great attitude it would be ideal that you have:
- Working knowledge of cyber risk management control design and evidence-based testing.
- Proven experience in cyber controls assurance (e.g. advisory internal or external audit roles).
- Good knowledge of industry practice such as NIST COBIT ISO27001 or PCI-DSS is beneficial.
- Strong analytical skills with attention to detail and an ability to see the bigger risk picture.
- Clear communicator who can tailor messages for technical and non-technical audiences.
- Collaborative and relationship-focused with the confidence to work independently and as part of a broader team
Required Experience:
IC
Key Skills
About Company
Sportsbet’s vision is clear: we want to become a world class betting & gaming business that’s trusted by our customers, colleagues and partners. We’re also here to make this the most exciting place you’ll ever work!
