Cybersecurity Risk Analyst

The role holder is responsible for developing and establishing quality assurance standards and measures for the Technology function within ASMO. The role is also responsible for monitoring and evaluating the information technology standards and compliance being used in the organization.

General Responsibilities:

• Develop Information Security Risk Management Framework.
• Support in the design and execution of information security risk programs, with focus on internal policies, standards and regulatory requirements
• Identify, assess and treat information security related risks as per the defined Information Security Risk Management Framework. Develop, maintain and report KRIs (Key Risk Indicators) for assessed information assets
• Follow up on remediation and treatment plans at planned intervals. Track and update the information security risk register
• Work with all ASMO departments to support and implement necessary steps to mitigate information risk within respective businesses.
• Develop Information Security policies and procedures as ASMO standards as well as in accordance with regulatory standards in order to ensure up to date Information Security and integration solutions at ASMO.
• Implement counter-risk measures while maintaining adherence to agreed policies and compliance practices to create a secure environment for ASMO’s Technology business operations.
• Develop, review, and analyse monthly business risk information reports with the aim to identify risks to the respective functions from a policy perspective.
• Monitor and audit system activities, conducts spot checks and identify and analyse security incidents in order to devise policies accordingly and direct required system changes in liaison with the concerned department.
• Conduct security assessment (e.g. for new software), define standards for set up and oversee integration of security requirements in the Technology Infrastructure in order to ensure compliance to policies and procedures.
• Provide Information Security guidance to Technology department projects using a risk-based approach and ensures Information Security measures are embedded on all IT projects and the adequate security controls are in place to achieve the desired protection level.
• Maintain a close awareness of best practices and industry standards in Information Security, assess potential security threats and risks to ASMO IT infrastructure, systems, network, and data and recommends any improvements in policies.
• Action all Information Security related observations and incidents.
• Liaise closely with end users, explain security risks and the business’ role in preventing security fraud and drive initiatives to sensitize end-users on security risks.
• Design and conduct information sessions and other initiatives to create awareness about Information Security.

Qualifications:

• Bachelor’s degree in Information Technology, or equivalent.
• Certified Data Privacy Solutions Engineer (CDPSE) is preferred.
• 5 years’ experience in similar or related field.
• Experience in Information Technology / Data Solutions / Networking / Cybersecurity is preferred.
• Demonstrated proficiency in oral and written English