Specialist, Cybersecurity Governance

• Utilize security awareness platforms and phishing simulation tools to plan, execute, analyze, and continuously improve phishing, smishing, vishing, and deepfake resilience and human risk reduction initiatives.

• Contribute to security awareness and training content, including bulletins, e-learning modules, presentations, and communications, leveraging insights from Governance program metrics, Global Cybersecurity Services (GCS) domain initiatives, and the cyber threat landscape.

• Support completion, reporting, and mitigations of cybersecurity maturity assessments to evaluate program effectiveness, identify improvement opportunities, and track GCS and Brand actions against target-state capabilities.

• Collaborate with the Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Compliance,IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.

• Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.

• Scope:
  The position supports the global Cybersecurity Governance programs and Global Cybersecurity Services to promote effective cybersecurity adherence across the enterprise. improvements, directly influencing the company’s bottom line. By managing supplier relationships and ensuring compliance with contractual terms, the safeguards supply continuity and quality standards. The insights and reports provided to senior management support strategic decision-making and long-term business planning.

• Problem solving:
  This position requires strong analytical, communication, stakeholder management, and problem-solving skills.

• Impact:
  Facilitates and influences stakeholders to adopt and adhere to cybersecurity policies, standards, and governance processes that support organizational objectives.

• Detail Oriented:
  Demonstrates exceptional attention to detail, ensuring accuracy, consistency, and quality across governance processes, documentation, and communications.

Core Competencies:

• Knowledge of governance, risk and compliance (GRC). cybersecurity principles, risk management principles and methodologies, and security control frameworks.

• Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations.

• Strong written and verbal communication skills.

• Strong analytical, organizational, and documentation skills.

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field.

• 1-2 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.

• Knowledge of information technology, cybersecurity and risk management.

• Preferred Experience:

• Professional certifications such as: CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), Security+, CGRC (Certified in Governance, Risk and Compliance)

• Experience with GRC platforms such as Logic Gate, Archer or Service Now IRM.

• Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements.

• Knowledge of AI security and AI governance best…