Information Security, Governance, Risk and Compliance (GRC) Analyst at Cyberlogic

PURPOSE OF POSITION:

• The Information Security Governance, Risk and Compliance Analyst provides support to all client organisation-wide information governance activities. The position focuses on establishing and ensuring adherence to enterprise information security policies, standards and practices, both at the department and Business and Functional areas level, to achieve the required level of consistency, quality and protection to meet overall business needs.
• This position will also provide input into strategic roadmaps and critical dashboards to provide management status to executive leadership. A GRC analyst will provide support in reviewing and editing existing Information Security Policies and Standards, manage and report on awareness training platforms as well as perform compliance checks on client systems.
• A person with this role must be able to understand complex information and communicate the information to people with diverse professional backgrounds.

KEY RESPONSIBILITIES:

• Draft and review information security related policies
• Carry out risk assessments and control reviews
• Serve as a liaison between Business and Functional areas and technology to ensure that Information Security Policies related business requirements for protecting sensitive data are clearly defined, communicated, and well understood and considered as part of operational prioritization and planning.
• Be an information security consultant in discussions regarding clients’ information security strategies.
• Verify compliance with the agreed policies
• Manage security awareness reports
• Analyse and account for positive and negative variances in report data

CORE COMPETENCIES:

• Deciding & Initiating Action
• Working with People
• Adhering to Principles & Values
• Persuading & Influencing
• Presenting & Communicating
• Writing & Reporting
• Applying Expertise & Technology
• Analysing
• Learning & Researching
• Creating & Innovating
• Formulating Concepts & Strategies
• Planning & Organising
• Delivering Results & Meeting Client Expectations
• Following Instructions & Procedures
• Adapting & Responding to Change
• Coping with Pressure
• Achieving Goals & Objectives

KEY REQUIREMENTS:

• Relevant Tertiary Qualification
• At least 2-3 years working experience in information security governance, risk and compliance.
• Excellent Communication skills (Written and Verbal)
• CISA, CISM or CISSP preferable

DESIRED REQUIREMENTS

• You may be required to travel to clients or our other offices. Own vehicle and a valid driver’s license is required.