Information Security Governance & Cybersecurity Specialist

Job Description…

To ensure effective implementation of Information Security Governance and Cybersecurity controls across

the organization, including compliance with ISR requirements, cybersecurity frameworks, risk

management, and business continuity practices, in order to protect digital assets, ensure service

resilience, and meet regulatory obligations.

Key Roles and Responsibilities

1. Information Security Governance & ISR

• Ensure compliance with the Information Security Risk (ISR) classification and related policies across

systems and services.

• Develop, review, and maintain information security policies, standards, and procedures.

• Monitor compliance with regulatory and governmental cybersecurity requirements.

• Prepare governance and compliance reports for management and relevant committees.

• Coordinate with technical and business teams to embed security governance requirements into

projects and systems.

2. Cybersecurity

• Oversee the implementation of cybersecurity controls across applications, infrastructure, and digital

services.

• Participate in vulnerability assessments and cybersecurity risk reviews in coordination with technical

teams.

• Review and validate security requirements for new systems, applications, and integrations.

• Support cybersecurity incident management, including documentation and corrective actions.

• Contribute to cybersecurity maturity improvement initiatives.

3. IT & Cyber Risk Management

• Identify, assess, and evaluate information security and cybersecurity risks.

• Maintain and regularly update the Risk Register and track mitigation actions.

• Provide risk-based recommendations to support informed decision-making.

• Assess third-party and vendor-related cybersecurity risks.

4. Business Continuity & Disaster Recovery

• Support the development, review, and maintenance of Business Continuity Plans (BCP) and Disaster

Recovery Plans (DRP).

• Coordinate with stakeholders to ensure readiness of critical systems and services.

• Participate in BCP and DR drills and exercises, and report on results.

• Monitor implementation of improvement actions arising from continuity tests.

5. Reporting & Coordination

• Coordinate with internal departments and external regulatory entities as required.

• Prepare periodic reports on cybersecurity posture, governance compliance, risks, and business

continuity.

• Support relevant governance, risk, and cybersecurity committees.

Qualifications

Bachelor’s degree in:

• Information Security

• Cybersecurity

• Information Technology

• Information Systems

• or a related field

Required Experience

Proven experience in:

• Information Security Governance

• Cybersecurity

• ISR implementation

• Risk Management

• Business Continuity

• Experience in government or large enterprise environments is preferred.

Required Skills

• Strong knowledge of cybersecurity and information security governance frameworks.

• Risk assessment and analytical skills.

• Report writing and presentation skills.

• Ability to work collaboratively with technical and business teams.

• High attention to detail, confidentiality, and professionalism.

Preferred Certifications

• ISO/IEC 27001 / 27002

• ISO 22301 (Business Continuity)

• CISSP / CISM / CRISC

• Recognized cybersecurity certifications