Cyber GRC Manager  

Position Summary:

• To align with the company's cyber security strategy to meet business objectives and to ensure the new JVco cyber security complies to country and industry regulations, best/good practices and company policies.

Key Responsibilities:

• To work with business functions to identify critical cyber/data security elements to be governed according to policies
• To continuously engage, communicate, and educate stakeholders to gather feedback and inculcate cyber security governance, risk and compliance principles and practice
• To review business processes and/or systems controls to ensure relevant cyber security controls are implemented to mitigate risk to the business
• To advise and support the company's cyber security steering committee programs and initiatives such as cyber security risk assessment, 3rd party due diligence, 3rd party audit co-ordination, regular cyber security metrics are updated and reported, etc.
• To drive resolutions for audit and cyber assessment findings to achieve effective control implementation
• To drive and foster strong cybersecurity culture ensuring best practices are followed

Qualifications:

• At least 5 years of experience in cyber security/infosec GRC roles
• Familiarity with NIST framework
• Track record in implementing GRC frameworks and compliance programs for corporate and client-facing systems.