Governance Risk Compliance (Information Security)

At Jubelio, we always innovate to create a business platform that can be used for small, medium or enterprise scale.

To fulfil this mission, Jubelio opens opportunities for those of you who want to join as a Governance Risk Compliance (Information Security)

Job Description:

Leadership & Management:

• Lead the information security team and manage daily operations.
• Maintain security policies, standards, and procedures.
• Coordinate and lead the ISO 27001 surveillance audit

Governance, Risk, and Compliance (GRC):

• Oversee and enhance the organization's GRC framework.
• Assess and mitigate IT risks related to data governance, information security, and data privacy.
• Develop and implement processes to assess and/or monitor the effectiveness of Security procedures to ensure adherence to standards and policies as appropriate.
• Stay up to date with emerging IT risks and industry best practices to ensure proactive risk management.

Collaboration & Communication:

• Work closely with IT and other departments to ensure security measures are integrated.
• Provide guidance and support to staff on information security best practices.
• Perform regular social engineering exercises / campaign to improve awareness.

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 2 years of experience in information security GRC and/or IT auditing.
• Must be experienced with ISO 27001 standards and audit processes; Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Auditor) are highly desirable.
• In-depth knowledge of information security frameworks and best practices.
• Able to work collaboratively with other corporate oversight functions to identify and implement consistent and effective approaches to risk governance and control-based activities.
• Possess credibility, persistence, confidence to manage projects, conduct workshops and presentations with senior management and other stakeholders.
• Good understanding of information management practices including information lifecycle management, data modelling, master data management, and the conduct of business audits is an advantage.
• Excellent analytical and problem-solving skills.
• Detail-oriented with a strong commitment to maintaining high standards.
• Proactive and able to work independently as well as part of a team.