IT Security Governance Officer

The IT Security Governance Officer is responsible for establishing and enforcing information security governance frameworks within a government entity. The role ensures compliance with national cybersecurity regulations, government policies, and international standards, while supporting risk management, audit readiness, and secure delivery of digital government services.

• Develop, implement, and maintain government-aligned information security policies, standards, and procedures
• Ensure compliance with national cybersecurity regulations, data protection laws, and government directives
• Align IT security governance with recognized frameworks (ISO 27001, NIST, COBIT, government cybersecurity standards)
• Conduct information security risk assessments and support risk treatment plans
• Monitor compliance with security controls across government systems and entities
• Coordinate internal and external audits, regulatory reviews, and compliance assessments
• Track security risks, exceptions, and remediation actions
• Support governance aspects of cybersecurity incidents, reporting, and post-incident reviews
• Review third-party and vendor security compliance for government contracts
• Ensure data classification, access control, and information handling policies are enforced
• Support cybersecurity awareness and mandatory government training programs
• Prepare governance reports, dashboards, and compliance submissions for senior management
• Collaborate with legal, compliance, IT, and national cybersecurity authorities

• Strong knowledge of government cybersecurity governance and regulatory environments
• Experience with public sector IT policies and compliance frameworks
• Risk management, audit coordination, and compliance monitoring skills
• Strong documentation, reporting, and policy-writing abilities
• Ability to communicate security risks in a non-technical, executive-friendly manner
• High integrity and attention to confidentiality requirements

• Bachelor’s degree in information security, IT, Computer Science, or a related field
• 4–7 years of experience in information security governance, risk, or compliance (public sector preferred)
• Professional certifications preferred:
  • CISM
  • CISSP
  • ISO 27001 Lead Implementer / Auditor
  • CRISC
• Knowledge of national cybersecurity policies and government data protection laws