Cybersecurity Governance, Risk and Compliance

The Governance and Risk Officer help ensure that the organization maintains a robust security posture, complies with relevant policies and standards, and fosters a culture of security among employees.

Key Responsibilities:

1. Governance and Compliance:

- Ensure compliance with relevant laws, regulations, and standards when required. - Develop, enforce, review, and monitor compliance and update security policies, standards, and procedures.

2. Risk Management:

- Assist in Identifying and assessing risks across the organization. - Conduct risk assessments, identify potential security risks, and implement mitigation strategies. - Monitor and report on risk exposure and mitigation efforts.

3. Information Asset Inventories and Control Management

- Maintain information asset inventories including categorization, critical assets, risks, and security controls in place. - Ownership of the cybersecurity Control Catalog and ensure controls are applied.

4. Security Auditing:

- Perform security audits, internally and respond to external audit demands. - Perform 3rd Party audits and maintain an inventory of vetted suppliers and tools.

5. Portfolio Companies

- The focus for this position will be Vitol affiliates. - This position will ensure that Vitol affiliates remain compliant with Vitol Cybersecurity policies and standards. - This position requires traveling to Vitol affiliates locations.

- 3+ years of professional experience in cybersecurity, with focus on auditing, governance, risk management. - Strong understanding of regulatory requirements and industry standards (eg. NIS2) - Knowledge of best practices in modern security architectures and incident responses - Relevant security certifications such as CRISC, CISA. - Familiarity with security control frameworks: CIS Controls, NIST Special Publication 800-53 - Familiarity with cybersecurity frameworks: NIST CSF, ISO27001

Personal Characteristics

- Highly responsive, energetic and enthusiastic - Analytical thinking and problem-solving skills. - Ability to work independently and as part of a team. - Strong ethical standards and integrity. - Capable of prioritising tasks and meeting critical deadlines - Excellent judgment, attention to details - Excellent communication and interpersonal skills - Expect duty to expand beyond normal business hours. - User/business focus