Cybersecurity Governance, Risk and Compliance in Genève

h3Job Description /h3pThe Governance and Risk Officer help ensure that the organization maintains a robust security posture, complies with relevant policies and standards, and fosters a culture of security among employees. /ph3Key Responsibilities: /h3h31. Governance and Compliance: /h3ulliEnsure compliance with relevant laws, regulations, and standards when required. /liliDevelop, enforce, review, and monitor compliance and update security policies, standards, and procedures. /li /ulh32. Risk Management: /h3ulliAssist in Identifying and assessing risks across the organization. /liliConduct risk assessments, identify potential security risks, and implement mitigation strategies. /liliMonitor and report on risk exposure and mitigation efforts. /li /ulh33. Information Asset Inventories and Control Management /h3ulliMaintain information asset inventories including categorization, critical assets, risks, and security controls in place. /liliOwnership of the cybersecurity Control Catalog and ensure controls are applied. /li /ulh34. Security Auditing: /h3ulliPerform security audits, internally and respond to external audit demands. /liliPerform 3rd Party audits and maintain an inventory of vetted suppliers and tools. /li /ulh35. Portfolio Companies /h3ulliThe focus for this position will be Vitol affiliates. /liliThis position will ensure that Vitol affiliates remain compliant with Vitol Cybersecurity policies and standards. /liliThis position requires traveling to Vitol affiliates locations. /li /ulh3Qualifications /h3ulli3+ years of professional experience in cybersecurity, with focus on auditing, governance, risk management. /liliStrong understanding of regulatory requirements and industry standards (eg. NIS2) /liliKnowledge of best practices in modern security architectures and incident responses /liliRelevant security certifications such as CRISC, CISA. /liliFamiliarity with security control frameworks: CIS Controls, NIST Special Publication 800-53 /liliFamiliarity with cybersecurity frameworks: NIST CSF, ISO27001 /li /ulh3Personal Characteristics /h3ulliHighly responsive, energetic and enthusiastic /liliAnalytical thinking and problem-solving skills. /liliAbility to work independently and as part of a team. /liliStrong ethical standards and integrity. /liliCapable of prioritising tasks and meeting critical deadlines /liliExcellent judgment, attention to details /liliExcellent communication and interpersonal skills /liliExpect duty to expand beyond normal business hours. /liliUser/business focus /li /ul #J-18808-Ljbffr