Security Risk Officier

This role will be responsible for managing and reporting on information security risks. This will include the Information Security and Safeguarding of Assets, as part of our Risk Universe items. In addition, this role will manage and report on the cross-sector Security risk register.

Job Description

• Maintain and develop wide Information Security Risk Management means and methods

• Perform information security risk assessments and propose mitigating controls

• Drive risk mitigation based on agreed controls

• Maintain Security risk register and Cross-Sector Security Risk Register.

• Perform and support risk reporting including tracking KRIs

• Alignment with other Sectors and their security risk registers

• Manage the Exception process including reporting on a regular basis

• Keep up with relevant international legislation, best practices, emerging threats, policies and benchmarks

• Drive the GRC tooling implementation

• Be the lead for the following focus groups

Information Security Risk Management

Strategic focus group development

Means and methods development

Competence and knowledge management

Experience

• Minimum of 8 years of relevant experience in information security risk management (must)

• A strong background in IT or proven relevant experience in the IT security domain

• Proven experience with the ISO27001/ISO31000 risk management framework

• Information security risk management qualifications like CRISC, CISSP, CISA or CISM (prefereable)

• Knowledgeable on global Privacy regulations.