Job Overview:

We are seeking a highly experienced IT Security Governance & Planning Analyst to join our team. This role is crucial in strengthening the organization’s cybersecurity governance by aligning strategic goals with leading security frameworks and industry best practices.

Roles & Responsibilities:

• Assist in the development and implementation of cybersecurity governance frameworks in alignment with ISO 27001, NIST, and other industry standards.
• Analyze business requirements and translate them into high-level technical and security requirements.
• Conduct security risk assessments, track mitigation plans, and support incident response readiness and planning.
• Perform data analysis to identify trends, vulnerabilities, and performance gaps.
• Develop and monitor KPIs and metrics to measure the effectiveness of security initiatives and overall compliance.
• Prepare and deliver progress reports, dashboards, and executive presentations to senior leadership.
• Collaborate cross-functionally to ensure cybersecurity governance is embedded in IT and business processes.

Skills & Competencies:

• Proficiency in Microsoft Excel, PowerPoint, and data analytics tools.
• Strong understanding of cybersecurity governance frameworks and best practices.
• Ability to transform complex technical data into clear executive-level reports and dashboards.
• Excellent analytical, problem-solving, and communication skills.
• Demonstrated experience in risk management, security compliance, and incident response planning.
• Ability to work independently and collaboratively in a fast-paced environment.

Experience:

• Minimum 7 years of experience in IT security, GRC (Governance, Risk, and Compliance), or strategic IT planning roles.
• Proven experience in developing KPIs, producing security performance reports, and presenting findings to senior stakeholders.
• Solid knowledge of cybersecurity frameworks, regulatory requirements, and risk assessment methodologies.

Education & Certifications:

• Bachelor's degree in Computer Science or a related field.
• Professional certifications are highly desirable, such as:
• PMP (or equivalent project management certification)
• CISSP, ITIL, COBIT, or TOGAF