Develop and manage IT and security control frameworks, ensuring alignment with internal policies, industry best practices, and regulatory requirements (e.g., ISO 27001, NIST, SOC). * Produce independent risk reports for senior management and governance committees, synthesizing security risks and providing recommendations for risk mitigation. * Strong understanding of Information Security frameworks (ISO 27001, NIST, SOC) and their application in second line assurance activities. * Strong communication and influencing skills, capable of working with senior and challenging the first line when necessary. Advisory - Senior Advisor
meer