Entry-Level GRC Consultant

Əsas vəzifələr Assessing Cyber Security Management practices and processes, organizational resources (time, money, personnel, etc.) capabilities to support business goals; Developing and implementing IT strategies and programs to improve the reliability and security of critical assets; Conducting IT audits that shall involve such projects as IT Due Diligence, CMMI assessments, compliance audits; Defining, implementing and maintaining a client’s security and IT policies and procedures. Advise a client’s leadership on cybersecurity/IT statuses; Develop and provide Cyber and IT Management training and security awareness workshops for a client’s personnel; Participating in assessing, testing and selection of new security products and technologies to benefit clients; Developing plans for how to handle potential cybersecurity crisis (BCP/DRP); Helping clients to identify validate and assess impact of information assets on ability to archive business goals; Studding and applying local Cyber and IT laws and regulations to client’s practices; Preparing and presenting cyber and IT briefings. Tələblər Higher education in Computer Science or Information Systems Administration; Up to 1 year of relevant experience in Cybersecurity or Information Security Governance/Management; relevant internship experience will also be considered. Experience within Cyber Risk Management practices and standards (ISO 27001, NIST, COBIT2019, Webtrust, etc. would be considered a an asset); Advanced written and spoken Azerbaijani and English; A team player with excellent communication, relationship and presentation skills; Customer service orientation; Interpersonal skills; An analytical mind with problem-solving abilities.