Air Navigation Services Company announces a cybersecurity risk management position.

Air Navigation Services Company Announces a Cybersecurity Risk Management Position

Knowledge and Experience

• Minimum of 6 years of experience in cybersecurity or information security.
• Previous experience working with organizations managing critical infrastructure is preferred.

Education and Certifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Systems Engineering, or equivalent.
• Possession of ISO27005 Risk Management certification is preferred.
• Possession of recognized certifications in cybersecurity, risk management, and compliance is preferred.

Key Activities

• Develop security risk profiles for computer systems by assessing threats and vulnerabilities.
• Develop strategies to mitigate security risks in line with the organization's risk tolerance level.
• Prepare statements on initial or residual cybersecurity risks for system operation.
• Ensure cybersecurity decisions are based on sound risk management principles.
• Act as a liaison for cybersecurity risk management with IT, operations, and other departments.
• Report to the management of the Risk, Compliance, and Governance department regarding security risks and exposures.
• Manage and coordinate policies and controls to ensure effective corrective actions are taken.
• Develop risk control monitoring programs to ensure cyber risks are managed effectively.
• Track risks and report to the company to ensure appropriate corrective measures are taken.
• Establish a cybersecurity risk management policy and define the management methodology.
• Prepare risk assessment reports and follow up on risk actions, ensuring alignment with the enterprise risk management methodology.
• Develop and maintain a cybersecurity risk register and analyze business impact and potential exposure to recommend mitigation actions.

Policies, Processes, and Procedures

• Perform daily activities while ensuring compliance with policies and procedures.
• Contribute to identifying opportunities for continuous improvement of systems and processes, considering best practices, cost reduction, and productivity enhancement.