IT Security Governance

About the role IT Security Governance role reporting to Head of IT Services and Governance within the Information Technology department.

encompasses security governance and ISMS management, IT audit and regulatory compliance, cybersecurity awareness and training, vulnerability assessment and penetration testing, security operations, and security incident response.

Develop and maintain IT Security Governance frameworks, policies, standards, and procedures to support business objectives and regulatory requirements Manage the IT documentation lifecycle, including IT policy and procedure announcement, version control, and periodic review to ensure documents remain current and compliant Facilitate IT governance assessments against ISO 27001, NIST, and other relevant frameworks, translating control gaps into practical remediation roadmaps Execute and coordinate the company's ISO 27001 certification work plan - coordinate gap analysis, implementation, and audit readiness Coordinate internal and external IT audits, ensuring timely remediation of audit findings and compliance gaps Support plan and document in preparing to OIC audit finding- including Annual OIC IT Audit, CRAF, IT Environment Survey, and Electronic Registration and Certificate requirements Design and deliver security awareness and phishing simulation programs for all staff Independently execute VA and Penetration Testing activities for servers, network infrastructure, applications, databas