Supplier and Risk Management Officer

Job Responsibilities

• Main contact for service provisioning, including interfaces to business, partners, customers and other safeguarding functions;
• Boost knowledge and awareness of security requirements and processes;
• Providing information security consulting and liaising with all relevant stakeholders;
• Co-ordinating, tracking and monitoring the Information security risks with the risk owners;
• Conduct Information security review meetings;
• Ensuring the effective implementation of Information Security principles and procedures during the full service life cycle of services;
• Identifying protection goals, objectives and metrics;
• Systematically assess the effectiveness of security controls;
• Overseeing the implementation and compliance of with standards in services and in projects;
• involved in the development of security guidelines, policies, and procedures, and contribute to security provisions; and
• Supporting the life cycle of security risk assessments, assessing and communicating deviations from security policies and security provisions, as well as developing effective strategies to mitigate identified information security risks.

Experience Required

• Degree in computer science, or similar professional experience;
• Knowledge of IT security technology, architecture and processes and profound knowledge of information security management systems and relevant industry standards;
• Experience in IT, 7 years+ experience in Information Security related fields and/and or risk management;
• Proven track record and experience in developing information security policies and procedures;
• Experience with supplier management (including public cloud and SaaS providers), IT outsourcing and relevant control frameworks, and in defining and monitoring contractual information security provisions; and
• Project management and/or leadership experience in complex enterprise environments, preferably in agile teams.