Specialist II, Governance, Risk and Compliance (TCF)

Roles & Responsibilities:

• Strong understanding / experience of Information security / Cyber Security / Business Resilience/ Disaster Recovery/ Crisis Management space and its impact on businesses.
• Experience in managing security, risk and compliance is desired
• Ensure compliance with internal controls and external standards (ISO 27001, ISO 22301, PCI DSS, TISAX, etc.).
• Experience in working with External Auditing firms on the industry certifications (ISO 27001, ISO 22301, PCI DSS, TISAX)
• Coordinate External audits, manage evidence collection, and track remediation of findings.
• Prepare dashboards and compliance reports for leadership.
• Support governance structures and ensure alignment with business and regulatory requirements.
• Assist in updating the cyber security strategy to leverage new technology and threat information.
• Experience in working with Legal and data privacy teams on the regulatory requirements and translating them into security controls.
• Reviewing & aligning data governance, compliance and risk policies and procedures with relevant regulatory and operational frameworks.
• Complete all assigned, mandatory training within the timeframe provided
• Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports