Cyber Security Analyst (Governance, Risk & Compliance)

Roles & Responsibilities:Develop, initiate, maintain, and revise policies and procedures for the proper operation of the compliance program and its related activities.Operationalise the Company’s Cybersecurity Strategy, Technology Risk Management, Technology Operations Governance Management, and Cybersecurity Management.Drive the annual execution, maintenance, and timely compliance certification for PCIDSS, managing day-to-day compliance operations, and collaborating with internal stakeholders to ensure project alignment with cybersecurity best practices and PCIDSS requirements.Manage and oversee vulnerability scans, penetration testing, internal audits, and third-party risk assessments to promptly address findings and implement corrective action plans for IT compliance vulnerabilities.Ensure effective communication of information security landscape and ongoing projects to staff and management, while serving as an independent review and evaluation body to resolve compliance issues.Requirements:Bachelor's degree in Computer Science, Information Security, Cyber Security, or equivalent.Minimum of 4 years of cybersecurity governance experience, including proficiency in developing and implementing security controls.Strong understanding of relevant cybersecurity regulations and standards (e.g., BNM Risk Management in Technology, PCI DSS, NIST Cybersecurity Framework).Clear understanding of IT operations with an information security perspective and its interaction with risk appetites to ensure compliance with industry, regulator, and card scheme requirements.Professional certification such as CISM, CISA, CISSP or equivalent.We are an Equal Opportunity Employer. Our recruitment philosophy is to recruit people with whom we can build a strong, mutually beneficial and lasting relationship. We welcome applicants from all backgrounds and identities, irrespective of race, religion, ethnicity, gender or disability.