Консультант GRC начального уровня

Əsas vəzifələr

• Assessing Cyber Security Management practices and processes, organizational resources (time, money, personnel, etc.) capabilities to support business goals;
• Developing and implementing IT strategies and programs to improve the reliability and security of critical assets;
• Conducting IT audits that shall involve such projects as IT Due Diligence, CMMI assessments, compliance audits;
• Defining, implementing and maintaining a client’s security and IT policies and procedures.
• Advise a client’s leadership on cybersecurity/IT statuses;
• Develop and provide Cyber and IT Management training and security awareness workshops for a client’s personnel;
• Participating in assessing, testing and selection of new security products and technologies to benefit clients;
• Developing plans for how to handle potential cybersecurity crisis (BCP/DRP);
• Helping clients to identify validate and assess impact of information assets on ability to archive business goals;
• Studding and applying local Cyber and IT laws and regulations to client’s practices;
• Preparing and presenting cyber and IT briefings.

Tələblər

• Higher education in Computer Science or Information Systems Administration;
• Up to 1 year of relevant experience in Cybersecurity or Information Security Governance/Management; relevant internship experience will also be considered.
• Experience within Cyber Risk Management practices and standards (ISO 27001, NIST, COBIT2019, Webtrust, etc. would be considered a an asset);
• Advanced written and spoken Azerbaijani and English;
• A team player with excellent communication, relationship and presentation skills;
• Customer service orientation;
• Interpersonal skills;
• An analytical mind with problem-solving abilities.