ES GRC Lead

Job Purpose
 

• Develop Security processes and Assure technology and business compliance to policies security standards. Enhance ES Governance frameworks, which include processes management and audits. ES Risk mentoring along with security demand assessment.

Job Description : 

• Assess ES security demand to ensure information security alignment and risk mitigation based on GRC framework 
• Lead Information security Risks monitoring and governance for identified risks and its mitigation efforts 
• Develop and maintain security standards, policies, procedures and guidelines at the Technology and Business level and ensure they comply with accredited standards. 
• Managing Process development and improvement workshops. 
• Develop Security processes plans & Design and implement process improvements. 
• Ensure that appropriate frameworks exist and are aligned with relevant security standards to identify, assess, mitigate, manage, communicate and monitor ES- related business risks. 
• Ensure implementation of security policies, controls and their compliance and escalate critical security events, if necessary Helps resource owners and technology staff responding to security audit failures reported by auditors. Conduct regular and adhoc security checks. 
• Track and report on action plans derived from deficiencies through external and internal audits