Cybersecurity Governance, Risk and Compliance

The Governance and Risk Officer help ensure that the organization maintains a robust security posture, complies with relevant policies and standards, and fosters a culture of security among employees. Key Responsibilities: 1.    Governance and Compliance: • Ensure compliance with relevant laws, regulations, and standards when required. • Develop, enforce, review, and monitor compliance and update security policies, standards, and procedures. 2.    Risk Management: • Assist in Identifying and assessing risks across the organization. • Conduct risk assessments, identify potential security risks, and implement mitigation strategies. • Monitor and report on risk exposure and mitigation efforts. 3.    Information Asset Inventories and Control Management • Maintain information asset inventories including categorization, critical assets, risks, and security controls in place. • Ownership of the cybersecurity Control Catalog and ensure controls are applied. 4.    Security Auditing: • Perform security audits, internally and respond to external audit demands. • Perform 3rd Party audits and maintain an inventory of vetted suppliers and tools. 5.  Portfolio Companies • The focus for this position will be Vitol affiliates. • This position will ensure that Vitol affiliates remain compliant with Vitol Cybersecurity policies and standards. • This position requires traveling to Vitol affiliates locations.     • 3+ years of professional experience in cybersecurity, with focus on auditing, governance, risk management. • Strong understanding of regulatory requirements and industry standards (eg. NIS2) • Knowledge of best practices in modern security architectures and incident responses • Relevant security certifications such as CRISC, CISA. • Familiarity with security control frameworks: CIS Controls, NIST Special Publication 800-53 • Familiarity with cybersecurity frameworks: NIST CSF, ISO27001 Personal Characteristics • Highly responsive, energetic and enthusiastic • Analytical thinking and problem-solving skills. • Ability to work independently and as part of a team. • Strong ethical standards and integrity. • Capable of prioritising tasks and meeting critical deadlines • Excellent judgment, attention to details • Excellent communication and interpersonal skills • Expect duty to expand beyond normal business hours. • User/business focus