Technology and Security Risk Director

📋 Description

• Collaborate with internal stakeholders across the company to proactively identify, escalate
• Providing oversight of Technology and Security Risk incidents and issues, and partnering with 1LOD
• Lead the Technology Risk and Control Self-Assessment (RCSA) process from a 2LOD perspective
• Support the Security Key Risk Indicators (KRIs) definition, monitoring, and reporting.
• Supporting the implementation and ongoing enhancement of Governance, Risk, and Compliance (GRC)
• Advocate and support the implementation of Risk Management frameworks for technology stakeholders

🎯 Requirements

• 8+ years in information security, with a strong security architecture or technical security
• Practical experience designing, implementing or reviewing cloud, IAM, cryptographic, network or
• Experience in risk oversight, or readiness to transition, with the technical judgement to challenge
• Ability to threat-model systems and assess technical evidence, including architecture diagrams, IAM
• Working knowledge of cloud resilience, multi-region/AZ failover, RTO/RPO and disaster recovery
• Familiarity with NIST CSF, ISO 27001, SOC 2 and relevant privacy requirements, including GDPR and

🎁 Benefits

• Competitive total compensation package
• L&D programs and Education subsidy for employees' growth and development
• Various team building programs and company events
• Wellness and meal allowances
• Comprehensive healthcare schemes for employees and dependants
• More that we love to tell you along the process!