Cybersecurity Governance, Risk and Compliance

The Governance and Risk Officer help ensure that the organization maintains a robust security posture complies with relevant policies and standards and fosters a culture of security among employees.

Key Responsibilities:

1.    Governance and Compliance:

• Ensure compliance with relevant laws regulations and standards when required.
• Develop enforce review and monitor compliance and update security policies standards and procedures.

2.    Risk Management:

• Assist in Identifying and assessing risks across the organization.
• Conduct risk assessments identify potential security risks and implement mitigation strategies.
• Monitor and report on risk exposure and mitigation efforts.

3.    Information Asset Inventories and Control Management

• Maintain information asset inventories including categorization critical assets risks and security controls in place.
• Ownership of the cybersecurity Control Catalog and ensure controls are applied.

4.    Security Auditing:

• Perform security audits internally and respond to external audit demands.
• Perform 3rd Party audits and maintain an inventory of vetted suppliers and tools.

5.  Portfolio Companies

• The focus for this position will be Vitol affiliates.
• This position will ensure that Vitol affiliates remain compliant with Vitol Cybersecurity policies and standards.
• This position requires traveling to Vitol affiliates locations.
   

Qualifications :

• 3 years of professional experience in cybersecurity with focus on auditing governance risk management.
• Strong understanding of regulatory requirements and industry standards (eg. NIS2)
• Knowledge of best practices in modern security architectures and incident responses
• Relevant security certifications such as CRISC CISA.
• Familiarity with security control frameworks: CIS Controls NIST Special Publication 800-53
• Familiarity with cybersecurity frameworks: NIST CSF ISO27001

Personal Characteristics

• Highly responsive energetic and enthusiastic
• Analytical thinking and problem-solving skills.
• Ability to work independently and as part of a team.
• Strong ethical standards and integrity.
• Capable of prioritising tasks and meeting critical deadlines
• Excellent judgment attention to details
• Excellent communication and interpersonal skills
• Expect duty to expand beyond normal business hours.
• User/business focus

Remote Work :

No

Employment Type :

Full-time