Job Description

Role Purpose

A cybersecurity compliance specialist focuses on ensuring that organizations adhere to various cybersecurity laws, regulations, and standards.

Key Accountability Areas

Key Activities

Compliance

• Analyze organization's Cybersecurity defence policies and configurations to evaluate compliance with regulations and organizational directives.
• Evaluate Cybersecurity aspects of contracts to ensure compliance with financial, contractual, legal and regulatory requirements.
• Ensure that any products implemented to manage Cybersecurity risks have been effectively evaluated and authorized for use.
• Recognize patterns of non-compliance with Cybersecurity policies and related documentation to identify ways to improve the documentation.
• Review Cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.
• Work with stakeholders to resolve Cybersecurity incidents and vulnerability compliance issues.
• Develop methods to effectively monitor and measure risk, compliance and assurance efforts.
• Develop specifications to ensure that risk, compliance and assurance efforts conform with Cybersecurity requirements.
• Maintain knowledge of applicable Cybersecurity defence policies, regulations and compliance documents as they pertain to Cybersecurity defence auditing.
• Monitor and evaluate a system's compliance with Cybersecurity, resilience, and dependability requirements.
• Provide an accurate technical evaluation of software applications, systems, or networks and document their compliance with agreed Cybersecurity requirements.
• Develop Cybersecurity compliance processes and audits for services provided by third parties.
• Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance.
• Cooperate with relevant regulatory agencies and other legal entities in any compliance reviews or investigations.
• Lead Cybersecurity analysis of the technology environment to detect critical deficiencies and

recommend solutions for improvement

• Research, recommend and evaluate Cybersecurity solutions that identify and/or protect against

potential threats, and respond to architecture design changes

• Assure vulnerability and penetration assessments conduct regularly, followed by appropriate remedial action verification.

Policies, Processes and Procedures.

• Conduct day-to-day activities while ensuring compliance to policies and procedures
• Contribute to the identification of opportunities for continuous improvement of systems, processes taking into account leading practices, changes in business environment, cost reduction and productivity improvement

Knowledge and Experience

• Minimum of 6 years of experience in Cybersecurity assessments, compliance, controls, standards and policies, cyber incident investigations.
• NCA regulation knowledge is required.

Education and Certifications

• A Bachelor’s degree in Computer Science, Computer Engineering, IT, Systems Engineering or equivalent is required.
• Preferred Cybersecurity GRC certifications , ISO27001 ISMS certification