GRC Specialist, Netcompany Group CISO Office

Do you want to help shape how a large IT company measures, manages and documents its information security? Are you motivated by turning data, risk and regulation into practical decisions? If so, you may be our next colleague in the newly established GRC team in Netcompany 's Group CISO Office. Responsibilities and technologies As a member of the GRC team, you will help ensure that Netcompany has an accurate, data-driven view of the effectiveness of its security controls and its level of compliance. The team takes a pragmatic and technically grounded approach to governance, risk and compliance, and works closely with the Application Security team, the Operations organisation, Internal IT and other business functions across the group. The GRC team is a small team of colleagues with complementary profiles. We do not expect any one candidate to cover every area described below. Instead, we are looking for broad profiles with solid experience across several of these areas and the motivation to develop within the rest. Your responsibilites will typically include: Developing and maintaining risk scenarios, assessing the effectiveness of mitigating controls against the scenarios, and conducting risk assessments to support business decisions Establishing automated measurements and KPIs that provide insight into the implementation and effectiveness of security controls across the business Interpreting regulatory and contractual security requirements and translating these into Netcompan