cyber security governance specialist.

Key Responsibilities:

• Security Strategy Development: Create and execute security strategies and frameworks that protect organisational assets and data.
• Risk Assessment: Evaluate and manage risks and vulnerabilities across systems, networks, and applications.
• Compliance and Audits: Conduct regular security audits and compliance assessments to ensure adherence to industry standards and regulatory requirements.
• Security Controls: Design and implement effective security measures to mitigate identified risks.
• Stakeholder Collaboration: Work closely with cross-functional teams to integrate security controls into business processes and systems.
• Policy Development: Lead the creation and enforcement of security policies, procedures, and standards across the organisation.
• External Audits: Participate in external audits and assessments to ensure compliance with legal and regulatory standards.
• Policy Review: Regularly review and enhance cyber security-related policies, procedures, and processes governing the enterprise.

Mandatory Requirements:

• Tertiary Qualifications: Degree in Information Technology, Computer Science, Cyber Security, Software Engineering, or a related discipline.
• Industry Certifications: CISSP, CISM, CRISC, CISA, PCI-QSA, ISO27001 LA/LI.

Required Skills and Experience:

• Operational Technology Expertise: In-depth knowledge of Operational Technology, particularly within Transport and City Infrastructure and proficiency in standards like ISA/IEC 62443.
• GRC Consultancy: Senior-level experience in Governance, Risk, and Compliance (GRC) consultancy.
• Cyber Maturity Assessments: Experience in assessing cyber maturity and identifying areas for improvement in a corporate environment.
• Security Technologies: Proficiency in network security, firewall technologies, IDS/IPS, vulnerability assessment tools, SIEM systems, and DLP solutions.
• Cyber Assessments: Familiarity with facilitating and evaluating divisional cyber assessments.
• Compliance Reporting: Ability to provide actionable recommendations for cyber uplift and prepare associated reports.
• ISMS Development: Expertise in developing and implementing Information Security Management Systems (ISMS) based on ISO27001, NIST CSF, and ACSC ISM frameworks.

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.