Job Purpose Summary:

The IT Security Governance & Planning Analyst is responsible for supporting the design, implementation, and continuous improvement of cybersecurity governance frameworks and programs. The role ensures alignment with international standards such as ISO 27001, NIST, and COBIT, and contributes to risk management, compliance monitoring, and security performance reporting. The position also plays a key part in analyzing data, developing KPIs, and preparing executive-level dashboards to strengthen overall cybersecurity governance and planning initiatives.

Key Responsibilities:

• Assist in the development, implementation, and maintenance of cybersecurity governance frameworks in alignment with ISO 27001, NIST, and other relevant standards.
• Analyze business and technical requirements to ensure effective translation into high-level information security objectives.
• Conduct security risk assessments, track remediation efforts, and support incident response planning.
• Perform data analysis to identify security trends, vulnerabilities, and control gaps, recommending actionable improvements.
• Develop and monitor KPIs and performance metrics to assess the effectiveness of IT security and compliance programs.
• Prepare and deliver security performance reports, dashboards, and presentations for management and executive stakeholders.
• Collaborate with internal teams to enhance governance, risk, and compliance processes.
• Support the strategic planning and continuous improvement of cybersecurity initiatives and frameworks.
• Ensure adherence to organizational and regulatory standards related to cybersecurity and data protection.

Education & Certifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• PMP certification or equivalent project management experience preferred.
• Additional certifications such as ITIL, COBIT, CISSP, or TOGAF are highly desirable.

Experience Requirements:

• Minimum 7 years of experience in IT Security, Governance, Risk, Compliance (GRC), or Strategic Planning roles.
• Proven experience in developing KPIs, creating security performance reports, and presenting insights to senior stakeholders.
• Strong understanding of cybersecurity frameworks, risk management principles, and compliance standards.
• Demonstrated ability to manage multiple initiatives in a fast-paced, dynamic environment.

Skills & Competencies:

• Strong analytical and problem-solving skills.
• Advanced proficiency in Microsoft Excel, PowerPoint, and data visualization tools.
• Excellent communication and presentation skills for senior management reporting.
• Deep understanding of information security governance, policies, and frameworks.
• Ability to manage cross-functional coordination and project execution.
• Strong organizational skills with a focus on quality, accuracy, and compliance.

Key Tools & Technologies:

• Microsoft Excel, PowerPoint, Power BI (or similar BI tools)
• Governance and Risk Management platforms (e.g., Archer, ServiceNow GRC)
• Cybersecurity standards: ISO 27001, NIST, COBIT, ITIL