Information Security Expert – Governance & Risk Management

About the role

The Information Security Expert will lead the design, implementation and continuous improvement of the organisation's security governance, risk management and compliance programmes. This senior role provides strategic advisory and operational oversight to protect information assets and ensure alignment with government regulations and international standards.

Key responsibilities

• Develop, implement and maintain information security policies, standards, procedures and guidelines aligned with organisational objectives and government mandates.
• Lead security risk assessments, threat modelling and vulnerability assessments across systems, applications and infrastructure.
• Ensure compliance with regional cybersecurity and data protection regulations, including ISO/IEC 27001.
• Oversee security monitoring, incident detection, response and recovery activities, including root‑cause analysis and corrective action planning.
• Plan and conduct internal and external security audits, track remediation of findings and close security gaps.
• Act as a trusted advisor to business units on secure system design, cloud security, third‑party risk and digital transformation initiatives.

Required profile

• Minimum 7 years of experience in information security, risk management and compliance.
• Proven ability to lead security audits, threat modelling and vulnerability assessments.
• Strong knowledge of ISO/IEC 27001 and regional cybersecurity regulations.
• Experience in cloud security, incident response and security governance.

Required skills

• Security Audits
• Compliance
• Threat Modeling
• ISO IEC 27001
• Risk Management
• Cloud Security
• Vulnerability Assessments
• Incident Management
• Cybersecurity
• Information Security Governance
• Data Protection