Cybersecurity Analyst

Reimagine what's possible!JOB SCOPEEnsure the performance, security, and reliability of JIGPC's Cybersecurity GRC activities and applications.Monitor and report on Governance and Compliance of JIGPC's Cybersecurity policies, procedures, applicable regulations, and standards as well as Audit reports.Identify and document Cybersecurity related Threats, Vulnerabilities and Risks and work with the relevant Stakeholders to implement appropriate Cybersecurity controls for their mitigation.Develop and maintain organizational cybersecurity policies.
Governs cybersecurity structures and processes, manages cyber risks, and assures compliance with the organization's cybersecurity, risk management and related legal requirements.Control the execution and implementation of Cybersecurity GRC related projects.Guarantee Quality of Work and deliverables.Internal Contacts:
Cybersecurity DirectorCybersecurity GRC ManagerCybersecurity TeamInternal AuditorAny other JIGPC Departments if requiredExternal Contacts:
Suppliers and VendorsPRINCIPAL DUTIES AND RESPONSIBILITIES1.
Participate in Cybersecurity Governance, Risk and Compliance (GRC) systems and activities, including the development, maintenance, support and improvement of Cybersecurity policies, processes, procedures and other documents.2.
Prepare and provide regular Cybersecurity GRC Reports and Metrics (Weekly, Monthly, Quarterly, Yearly, Ad Hoc, etc.).3.
Conduct Cybersecurity Risk Management, including Risk Assessments of JIGPC's Information assets and services, and work with the Risk Owners to mitigate the Risks through appropriate Cybersecurity Controls.4.
Develop, maintain, and perform regularly updates to Cybersecurity Risk Register and contribute towards Cybersecurity improvements.5.
Perform Compliance Management for JIGPC's Policies, Procedures, applicable Regulations (MoE, NCA and HCIS) as well as Standards and Audit recommendations.6.
Provide support to the users of the Cybersecurity GRC systems.7.
Operate a Cybersecurity Awareness Program consisting of Cybersecurity related training and awareness sessions, Phishing awareness and Tests and Cybersecurity Announcements, etc.8.
Ensure an organization's cybersecurity program complies with applicable requirements, policies and standards.9.
Develop, update, and maintain cybersecurity policies and procedures to support and align with an organization's cybersecurity requirements.10.
Perform any task not mentioned with similar job nature.11.
Perform any other duties assigned by the Head Cybersecurity Specialist or Director.REQUIREMENTSMinimum Qualifications (degree, training, or certification required)Degree:
Bachelor's Degree in Cybersecurity, Information Security, Computer Science or equivalent.Certifications:
GRC and Cybersecurity related certifications (e.g.
Security+, CISSP, CISA, CRISC, CISM, CEH, GIAC, SSCP, etc.) preferred.Robust knowledge of Cybersecurity regulations, standards, and controls.Strong understanding of IT / Cybersecurity Governance, technologies, and services.Expertise in preparing and analyzing GRC and Cybersecurity reports.Experience in IT / Cybersecurity Audit / Compliance / Regulatory discussions.Minimum Experience (Technical, functional, and/or leadership experience required)One to Two (1 - 2) years of IT GRC / Cybersecurity GRC / Information Security related work experience.Job Specific Skills (Key functional, leadership, or business skills required)Awareness of latest IT GRC / Cybersecurity GRC trends and techniques.Ability to identify Cybersecurity related Risks and their corresponding controls.Ability to work under pressure in a fast-paced environment and meet tight deadlines.Ability to work successfully in both individual and team settings.Strong critical thinking, problem-solving, logic, and forensics skills.Demonstrated capacity to learn, intellectual honesty and independent thinking.Strong interpersonal communication skills.Strong verbal and written communication skills in English.
•