Lead - Cyber Security - Governance & Compliance - Dialog Axiata Colombo 02

About the job

Lead - Cyber Security - Governance & Compliance

Job Purpose:

The Lead - Cyber Security - Governance and Compliance position is pivotal in driving the implementation and ensuring compliance with Dialog's internal controls, regulatory requirements, and information security policies and procedures. This role involves consulting and advising business and technology teams on the implementation of security controls and frameworks, ensuring alignment with business objectives.

The Job:

• Develop and seek approval for security policies, standards, guidelines, and procedures.
• Interpret and translate policies into technical requirements with technology teams and vendors.
• Drive the implementation of defined policies, standards, guidelines, and procedures.
• Periodically review and update security policies to align with changing landscapes.
• Stay updated on technology, business, and regulatory changes; develop new policies accordingly.
• Align policies to achieve compliance requirements.
• Identify cybersecurity threats, vulnerabilities, and associated risks.
• Assess business impact of risks and advise on appropriate controls.
• Engage with ERM to develop risk response plans.
• Monitor implemented controls and update stakeholders on risk movement.
• Conduct third-party security assessments and verify vendor controls.
• Perform gap assessments against compliance requirements and drive implementation to close gaps.
• Engage with external assessors and internal stakeholders for compliance reviews.
• Automate compliance checking and reporting.
• Manage compliance exceptions and update risk registers.
• Advise on security threats impacting solution deployment and propose necessary controls.
• Coordinate incident management and provide timely updates.
• Develop training and awareness programs.
• Plan and manage deployment of security solutions.
• Prepare cybersecurity progress reports and updates for management and the Board Risk and Compliance Committee.

The Person:

• B.Sc in Cyber Security, Information/Computer Security, Computing (Cybersecurity), Computer Science with Network Technology, or a similar B.Sc with Cybersecurity as a major subject.
• 5 years of experience in IT/Telco Network, Cyber Security, Technology Assurance, Cybersecurity Governance/Internal Audit, or a related field.
• Alternatively, a B.Sc. in Engineering in Computer Science or a similar academic qualification.
• One of the following certifications: ISO 27001 or ISO 27701 Lead Auditor/Implementer, Security+, ITIL Foundation, Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), or a similar professional qualification.
• Strong cybersecurity technical knowledge.
• Strong business acumen with the ability to articulate complex cybersecurity issues and scenarios to business in simple, understandable terms and vice versa.
• Up-to-date knowledge of the latest cybersecurity trends and threat landscapes impacting business.