IT Security Governance Officer

About the role

We are looking for an experienced IT Security Governance Officer to lead our information security governance, risk and compliance programme. You will shape security policies, ensure adherence to international standards and support the organisation’s overall cybersecurity framework.

Key responsibilities

• Develop, maintain and communicate information security policies, standards and procedures.
• Ensure compliance with cybersecurity regulations and frameworks such as ISO 27001, NIST and COBIT.
• Conduct security risk assessments, track remediation actions and report on risk status.
• Coordinate internal and external security audits and compliance reviews.
• Monitor security controls, vendor compliance and produce governance reporting.
• Support cybersecurity awareness initiatives and incident governance processes.
• Collaborate with IT, Risk, Legal and business stakeholders to embed security across the organisation.

Required profile

• Bachelor's degree in Information Security, Computer Science, IT or a related discipline.
• 4‑7 years of experience in information security governance, GRC or cybersecurity.
• Strong knowledge of ISO 27001, NIST and COBIT frameworks.
• Experience in risk management, audit coordination and policy development.
• Professional certifications such as CISM, CISSP, CRISC or ISO 27001 Lead Implementer/Auditor are preferred.
• Previous experience in the public sector or government environment is an advantage.

Required skills

• ISO 27001
• NIST
• COBIT