Manager Information Security (Cyber GRC)

Job Description

As a Cyber GRC Manager at Zafin, you will play a crucial role in developing and maintaining governance, risk, and compliance frameworks for cybersecurity. Your responsibilities will include conducting cyber risk assessments, audits, and ensuring adherence to regulatory requirements and industry standards. You will collaborate with internal teams and clients to mitigate cyber risks and enforce cybersecurity policies. Your strong knowledge of cyber risk management, compliance practices, and GRC tools will be essential for success in this role.**Key Responsibilities:**- Develop and implement governance, risk, and compliance frameworks for cybersecurity in alignment with industry standards and regulatory requirements.- Continuously improve the GRC process to enhance risk management and compliance across the organization, owning Trust Center and Cyber GRC controls.- Conduct comprehensive cyber risk assessments, support internal audits, identify gaps in cybersecurity practices, and recommend remediation measures.- Perform vendor risk assessments focusing on information security and cybersecurity practices, ensuring vendors meet cybersecurity requirements.- Monitor changes in cybersecurity regulations, update policies and procedures, provide training, and ensure compliance with relevant laws and regulatory requirements.- Develop, review, and maintain cybersecurity-related policies and procedures, communicate policies to all employees, and integrate them into day-to-day operations.- Prepare reports on cybersecurity risks, compliance levels, and vendor assessments, collaborate with cross-functional teams to mitigate risks and improve cybersecurity posture.**Qualifications Required:**- Bachelors degree in computer science, Information Security, or a related field.- Strong knowledge of GRC frameworks such as NIST, ISO 27001, GDPR, etc.- Minimum 6 years of experience in cybersecurity risk, governance, or compliance.- Experience in conducting risk assessments and audits, working on Azure Environment, and Vendor Risk Management (Information Security focus).- Certifications such as CISA, CRISC, CGEIT, CISSP, ISO/IEC 27001 Lead Auditor, or equivalent.- Experience using GRC tools for risk and compliance tracking.Zafin offers a supportive work culture that values diversity, teamwork, and high-quality work. Competitive salaries, annual bonus potential, generous paid time off, wellness benefits, and opportunities for professional growth and career advancement are some of the benefits you can look forward to. Visit zafin.com/careers to explore more about career opportunities with Zafin. Zafin welcomes applications from individuals with disabilities and provides accommodations upon request. Your privacy and security are important to Zafin, and details on how your personal information is handled during the recruitment process can be found in Zafins privacy policy at https://zafin.com/privacy-notice/. By applying for a job, you agree to the processing of your personal data by Zafin as described in the candidate privacy notice. As a Cyber GRC Manager at Zafin, you will play a crucial role in developing and maintaining governance, risk, and compliance frameworks for cybersecurity. Your responsibilities will include conducting cyber risk assessments, audits, and ensuring adherence to regulatory requirements and industry standards. You will collaborate with internal teams and clients to mitigate cyber risks and enforce cybersecurity policies. Your strong knowledge of cyber risk management, compliance practices, and GRC tools will be essential for success in this role.**Key Responsibilities:**- Develop and implement governance, risk, and compliance frameworks for cybersecurity in alignment with industry standards and regulatory requirements.- Continuously improve the GRC process to enhance risk management and compliance across the organization, owning Trust Center and Cyber GRC controls.- Conduct comprehensive cyber risk assessments, support internal audits, identify gaps in cybersecurity practices, and recommend remediation measures.- Perform vendor risk assessments focusing on information security and cybersecurity practices, ensuring vendors meet cybersecurity requirements.- Monitor changes in cybersecurity regulations, update policies and procedures, provide training, and ensure compliance with relevant laws and regulatory requirements.- Develop, review, and maintain cybersecurity-related policies and procedures, communicate policies to all employees, and integrate them into day-to-day operations.- Prepare reports on cybersecurity risks, compliance levels, and vendor assessments, collaborate with cross-functional teams to mitigate risks and improve cybersecurity posture.**Qualifications Required:**- Bachelors degree in computer science, Information Security, or a related field.- Strong knowledge of GRC frameworks such as NIST, ISO 27001, GDPR, etc.- Minimum 6 years of experience in cybersecurity

Keyskills :
Risk MitigationCybersecurityGRC frameworksRisk assessmentsAuditsVendor Risk ManagementRegulatory Compliance Monitoring