Degree preferably in Computer Science, Computer Networks or Information Security.
3-5 years of experience.
Familiarity with relevant regulatory frameworks and standards, such as NCA and ISO 27001
Strong technical background in Information Security and Risk Management
Security certifications desirable (CISSP, ISO 27001 LI, CRISK, etc.)
Knowledge of risk assessment methodologies, including identification, analysis, evaluation, and
Implements processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifacts.
Responsibilities:
Develop and maintain cybersecurity policies, standards, and procedures in alignment with industry best practices and regulatory requirements (NCA Regulations).
Conduct comprehensive cybersecurity risk assessments, 3rd party risk assessment to identify potential vulnerabilities and threats
Hands-on experience in implementing the NCA controls.
Hands-on experience in developing business continuity and disaster recovery plans.
