About the Role

The position is based in Port Moresby and will report to the Manager Security Governance and Risk.The successful incumbent will be responsible to support the Manager Information Security Governance, Risk and Compliance and be responsible for supporting Information Security compliance activities and Cyber Security Risk management throughout the BSP Financial Services Group.

Key Deliverables

• Lead and manage group compliance with PCI DSS, SWIFT CSF, ISO27001, GDPR, local privacy laws, contractual requirements and globally-recognized standards and guidelines.
• Plan, conduct and oversee cyber security risk assessments across the group.
• Identify, evaluate and prioritize risks to enable appropriate mitigation strategies and establish processes to continuously monitor emerging threats and risks.
• Develop, manage and maintain up-to-date risk register and provide regular risk reports to management.
• Work with team to ensure all compliance activities Internally and Externally are tracked and addressed within the due date.
• Collaborate with cross-functional teams to integrate compliance requirements into business processes and technology.
• Lead the annual assessment of all compliance activities and follow up with team to ensure evidences are collected prior to the assessment.
• Lead and manage any escalations and resolution of security compliance and risk issues with appropriate stakeholders.
• Reviews on systems to detect and report any control breakdowns in processes.
• Engage delegated tasks from reporting manager or CISO when required.
• Stay abreast of cybersecurity developments and their impact on the security of BSP’s IT systems.
• Lead a team of InfoSec analysts, provide guidance, mentorship, foster accountability, ensure continuous improvement and manage their performance.

Essential Qualifications, Professional/Skills and Experience:

• Degree in Information Technology or Information Security.
• Certification in any of the following; SSCP & Security certification.
• Advanced knowledge of Information/Cyber Security tools and technology.
• Advance skills Compliance standards.
• Experience in IT Risk Assessment standards and methodology.
• Excellent communication, collaboration, leadership and mentoring skills.
• 5 years in Information Technology/Security role.
• 1-2 years or more in leading a team in any of the following areas Audit, Risk and compliance.
• 2-3 years or more working in the area of Audit, Risk and Compliance.
• 5 years or more years of documentation preferably policy review and creation.
• 1-3 years in a cyber-security management role.