IT, GRC Supervisor Analyst

Job Description

Job Descriptions:

a. GRC Security:

• Security policies review and supporting procedures/ processes follow cybersecurity framework or adherence to standards.
• Work closely with IT teams or other departments to implement controls on security practices.
• Internal and external audits:

- Assist with operating IT Risk assessments (organizational, business process, third party, etc.).

- Co-operate security assessments (application, vulnerability, audit).

• Coordinate written responses from customers and prospects on Information Security controls and regulatory compliance.
• Develop security compliance or routine reports.
• Assist in investigative and remediation efforts in case of security and compliance breaches.
• Promote security awareness and cultivate employees’ adherence to information security practices.

b. Project Management:

• Define scope of system and objective relate to IT Security.
• Assist to assesses the risks of various solutions and prioritizes competing business demands.
• Act as the bridge between stakeholders and development team to clarify.

c. Data Privacy:

• Serve as the main point of contact within the organization for staff members, regulators, and relevant public authorities on issues related to data protection.
• Ensure that company policies are following codes of practice of Decree 13/2023 – Personal Data Protection.
• Evaluate the existing data protection framework to identify areas of no or partial compliance and rectify any issues.
• Devise training plans and provide data protection advice to staff members.
• Inform and advise the data controller or data processor on all matters related to data protection.
• Draft new and amend existing internal data protection policies, guidelines, and procedures, in consultation with key stakeholders.

Job Requirement

• Bachelor’s degree graduated from University/College major in Computer Science or computer related field. 
• 5+ years of working experience in IT Auditor/ IT Governance and Compliance.
• Other qualification Relate to ISO 27001, ITIL, Audit certificate is a plus. 
• The ideal candidate possesses a Growth mindset, demonstrating a proactive approach to learning and improvement. S/he is resilient, open to feedback, and continuously seek opportunities to innovate and drive personal and team development.

• The ideal candidate embraces a One-Team mindset, prioritizing collaboration and unity across all departments. S/he fosters a culture of teamwork, mutual respect, and shared goals, ensuring that the success of the organization is achieved collectively.

• The ideal candidate must have these general competencies: HRM Overview Knowledge, Product/ Solutions Knowledge, Client Management, Project Management, Operation Management, Problem solving & Decision making.

• Have business Knowledge, insights, strategies and solutions: Recognizes how the business works, understands and applies commercial and financial principles to create selling opportunities​