Lead Technology Governance (TGRC) – Cybersecurity

About the role

Lead Technology Governance (TGRC) within the cybersecurity domain by implementing security policies, reducing risk, and ensuring compliance with international regulations and standards.

Key responsibilities

• Develop and implement Cyber TGRC frameworks.
• Conduct risk assessments and define mitigating controls.
• Establish and maintain policies, standards and procedures aligned to ISO 27001, NIST, CIS, etc.
• Manage compliance with GDPR, SOX, ITAR/EAR and other regulations.
• Plan and execute internal/external audits and lead corrective actions.
• Collaborate with IT/OT, Legal, Procurement and business stakeholders.
• Support incident response with regulatory reporting and governance.

Required profile

• At least 3 years of proven experience in GRC/Information Security.
• Deep knowledge of standards/regulations such as ISO 27001, NIST‑CSF, CIS Controls, GDPR.
• Strong technical understanding across infrastructure, cloud, networking and OT protocols.
• Experience in project management, policy writing and control implementation.
• Excellent written and verbal English.
• Relevant certifications (CISM, CRISC, ISO 27001 Lead Implementer/Auditor) are a plus.

Required skills

• ISO 27001
• NIST
• CIS Controls
• GDPR
• SOX
• ITAR/EAR
• Infrastructure
• Cloud
• Networking
• OT protocols

What we offer

• Direct impact on organizational cyber resilience aligned to business objectives.
• Broad exposure to technologies, regulations and cross‑functional collaboration.