Listing Description

Information Security GRC Specialist

ThriveDX Labs, a subsidiary of ThriveDX Group LTD, is a world-renowned pioneer in cyber services, digital knowledge transfer, and technical solutions. We are a young, fast-growing company focused on our flagship product, a cutting-edge educational platform that uses innovation to make the ideal learning environment for B2B and B2C ecosystems around the world.

Internal Governance and Compliance Specialist duties include

• Maintain and update the HackerU group procedures and policies for information security topics


• Maintain Business Impact Analysis (BIA) programs for monitoring and updating company assets


• Maintain Disaster Recovery Plans (DRP) and playbooks for monitoring and updating company assets


• Oversee ThriveDX group’s business continuity strategies in order to minimize risk


• Enable processes and audits of certifications in information security, specifically ISO27001, SOX, and SOC 2 type 2.


• Develop and implement a comprehensive risk management strategy for the ThriveDX group


• Conduct risk assessments: Analyzing and identifying potential hazards to the ThriveDX group


• Conduct risk assessments: Evaluating the ThriveDX group’s existing risk management practices and comparing prospective risks to company-defined criteria


• Monitoring the organization’s data protection compliance


• Ensuring that the organization processes personal data in compliance with applicable data, protection laws, and regulations


• Privacy awareness-raising/training activities in the organization

Requirements

• At least three years of experience in governance and compliance or risk assessor roles


• Ability to work under pressure efficiently


• Analytical skills and an eye for detail


• Planning and organizational skills


• Ability to understand broader business issues


• Great communication and presentation skills


• Excellent command of the English language, both verbally and in writing

Advantage

• A degree or certification in governance, information security standards, risk management or another relevant degree