Job Description
Eram Talent is seeking an experienced Industrial Cybersecurity Governance, Risk, and Compliance (GRC) Lead to join our client in Tabuk. In this role, you will be responsible for developing and managing the GRC framework for industrial environments, ensuring that all cybersecurity practices align with regulatory requirements and industry standards.
Your primary focus will be on maintaining a robust governance structure, conducting comprehensive risk assessments, and ensuring compliance with relevant laws and organizational policies. You will lead initiatives to enhance the cybersecurity posture of our industrial clients, safeguard critical infrastructure, and manage operational technologies effectively.
Key Responsibilities
- Establish and maintain the GRC framework tailored for industrial control systems (ICS) and operational technology (OT) environments.
- Conduct regular risk assessments, compliance audits, and security evaluations to identify potential threats and vulnerabilities.
- Collaborate with cross-functional teams to develop and implement policies, standards, and procedures related to industrial cybersecurity.
- Ensure compliance with industry regulations, including ISO 27001, NIST, IEC 62443, and other applicable standards.
- Lead training programs and awareness initiatives to promote a culture of cybersecurity compliance within the organization.
- Monitor and report on GRC metrics, maturity assessments, and compliance status to senior leadership.
- Engage with external auditors and regulatory bodies to facilitate reviews and assessments.
- Stay current with emerging risks, cyber threats, and regulatory changes impacting the industrial cybersecurity landscape.
