Cybersecurity and Compliance Auditor Lead for an International Packaging Company
The role will support the IT Group organisation with regular occurring compliance tasks. The overall goal is to facilitate achieving compliance with the Group’s Cybersecurity policy framework. **Your accountabilities** - Ensure IT organisation working practices comply with the Group’s Cybersecurity policy framework and assist the teams understanding of risk exposures to the Group;
- Working practices comply with the Group’s Cybersecurity policy framework and assist the teams understanding of risk exposures to the Group;
- Development and ongoing maintenance of cybersecurity policies and processes together with support and review of procedures for the delivery and adherence to aforementioned policies & processes;
- Manage cybersecurity risks through the execution of risk assessments and monitoring activities, effective risk identification, reporting and escalation;
- Identify and follow up on, non-compliance with Group’s cybersecurity policy framework, which can result in operational and/or compliance risk for both functions;
- Manage exceptions, exclusions and alternative controls for all Group Cybersecurity requirements;
- Provide guidance,
direction and coaching on cybersecurity matters;
- Managing and coordinating the Cybersecurity compliance schedule of regular tasks for both functions;
- Point of contact for audit related queries, ensuring the function’s readiness for audit testing and facilitate the timely resolution of audit findings;
- Identify opportunities for continued process improvements within the Cybersecurity Compliance;
- Support the investigation of any potential Cybersecurity related incidents;
- Support cybersecurity assignments as well as supporting GDPR/Data Protection initiatives within the responsible functions. **Qualifications, knowledge, and experience**: - Bachelors degree in computer science, information systems, cybersecurity. - Experience in information security risk and compliance roles - Professional certifications (example: CISSP, CISM, CISA, CRISC) or a related certification. - Knowledge of security compliance, policy management, security frameworks (NIST, ISO, SOX) and regulations. - Experience working with ServiceNow
If this position does not fit your profile, but you are looking for a career change, contact us so we can have a confidential conversation about your career.