Manager - Information Security

Job Description: Manager – Information Security (Cyber GRC)

• Governance, Risk, and Compliance (GRC ): Frameworks: Develop and implement governance, risk, and compliance frameworks for cybersecurity. Ensure that frameworks are aligned with industry standards, regulatory requirements, and internal policies. Continuously improve the GRC process to enhance risk management and compliance across the organization . Be an owner for Trust Center and Cyber GRC controls under the overall controls framework.
• Cyber Risk Assessments and Audits : Conduct comprehensive cyber risk assessments and support internal audits to evaluate security controls, processes, and compliance. Identify gaps in cybersecurity practices and recommend remediation measures. Provide evidence and documentation to internal audit teams and clients for certifications and compliance audits.
• Vendor Risk Assessments: Perform vendor risk assessments, focusing ...