Risk & Control Management
- Identify and mitigate IT and cybersecurity risks through risk assessments and recommend appropriate controls.
- Maintain IT and cyber risk registers and monitor Key Risk Indicators (KRIs), such as system downtime or data breaches.
- Recommend, implement, and oversee IT controls and security measures.
System & Data Security
- Ensure IT functionality requirements and standards are met during assessments.
- Implement and maintain access management controls (user IDs, role-based access).
- Monitor and enforce encryption, firewall, and backup standards.
Monitoring & Incident Response
- Identify gaps in network security and maintain related documentation.
- Monitor system logs for suspicious activity and coordinate incident response with IT teams and external partners.
- Ensure all breaches are reported within 24 hours, with corrective actions implemented promptly.
- Assess skills gaps in IT-related departments and advise on training and development plans.
Compliance & Training
- Ensure compliance with IT-related regulations, including data privacy, GDPR, and cybersecurity laws.
- Conduct annual IT and cybersecurity awareness programs for staff.
- Liaise with vendors, regulators, and auditors during IT security reviews.
Other Duties
- Perform additional tasks as assigned by the Risk & Compliance Manager.
Education & Experience
- Bachelor’s degree in IT, Computer Science, or a related field.
- 3–5 years of experience in IT security, cybersecurity, or risk management.
- Strong skills in identifying, evaluating, and mitigating IT risks across various IT functions.
Skills & Competencies
- Strong knowledge of cybersecurity frameworks.
- Analytical ability to assess and mitigate cyber risks.
- Incident response and crisis management skills.
- Strong coordination and communication skills.
Key Performance Indicators (KPIs)
- 100% of IT/cyber incidents detected and resolved timely.
- Compliance with IT security policies and regulatory standards.
- 100% of staff trained in cybersecurity awareness.
- Reduction in system downtime and vulnerabilities.
- Timely completion of BCP/DRP testing for IT systems.
Please ensure that your email includes the vacancy ID in the Subject line & attach your Portfolio in the Email.
Note that only the candidates who meet the requirements of the position will be shortlisted.
If you meet the above requirements, we encourage you to apply for this position. Please send your CV along with a cover letter via email to kabuljobs@peacegl.com.
RATCS is a leading consultancy and outsourcing company dedicated to providing innovative solutions that empower businesses to achieve their goals. With a commitment to excellence, we specialize in delivering strategic consulting services and comprehensive outsourcing solutions tailored to meet the unique needs of our clients.