Associate Director - Cybersecurity Risk and Compliance

Job description

A multi‑task role covering cybersecurity and compliance. Conduct periodic and ad‑hoc assessments of cybersecurity risk across IT and OT environments; identify potential operational risk scenarios; coordinate risk reviews as part of major IT/OT changes; reassess risk posture after major changes, incidents, or regulatory updates; review and confirm existing controls to calculate residual risk and define remediation actions; provide unified tools and assistance to support self‑assessments by IT, OT and business teams; support integration of assessment results into control design, governance and implementation; track remediation progress and accelerate delayed or high‑priority items as needed; coordinate with performance management to define and monitor key risk indicators; maintain a cybersecurity risk register; coordinate and conduct internal cybersecurity compliance assessments across relevant domains and functions; act as primary interface for external audits and regulatory inspections

Requirements

• Conduct periodic and ad‑hoc cybersecurity risk assessments
• knowledge of operational risk scenarios
• proficiency in coordinating risk reviews
• experience in reassessing risk after changes or incidents
• proficiency in reviewing controls and defining remediation
• proficiency in providing tools and assistance for self‑assessments
• knowledge of integrating assessment results into control design
• proficiency in tracking remediation progress
• knowledge of key risk indicators
• proficiency in maintaining a risk register
• proficiency in internal compliance assessments
• proficiency in handling external audits.

Skills