Develop and manage IT and security control frameworks, ensuring alignment with internal policies, industry best practices, and regulatory requirements (e.g., ISO 27001, NIST, SOC). * Produce independent risk reports for senior management and governance committees, synthesizing security risks and providing recommendations for risk mitigation. * Advise on risk management strategies and propose improvements to enhance the organization's security posture and overall risk maturity. * Oversee the review of IT and security contractual clauses with , ensuring they meet second line's standards for risk management. * Collaborate with the first line, providing support and challenge to enhance the effectiveness of security controls and practices. * 4+ years of experience in information security or risk management, with a focus on second line functions.
meer