Cybersecurity Governance & Risk Specialist

About the role

We are looking for a Cybersecurity Governance and Risk specialist to join our Cyber Security team. The role focuses on the tactical execution and oversight of Identity and Access Management (IAM) controls, ensuring compliance with internal policies, regulatory requirements and global security standards while supporting a seamless customer experience.

Key responsibilities

• Operate and execute tactical IAM controls, guaranteeing accuracy, completeness and timely delivery.
• Lead evidence submission and coordinate with internal and external auditors to assure quality across control activities.
• Communicate and align with global cybersecurity teams and stakeholders to maintain strategic consistency.
• Develop, maintain and enforce access‑control policies and procedures for users, applications and data.
• Support the Cyber Security Delivery function by improving vendor service experience.
• Resolve escalated issues through collaboration with internal departments and key stakeholders.

Required profile

• Minimum 3 years of experience in cybersecurity governance, risk management or related fields.
• Experience in regulated environments and familiarity with service‑level assessment, vendor performance management and third‑party engagement.
• Strong understanding of ITIL methodology, BAU operations and change management.

Required skills

• Identity and Access Management (IAM) controls.
• ITIL framework.
• Regulatory knowledge of GDPR, PCI DSS, NIST Cybersecurity Framework and ISO/IEC 27001.
• Risk assessment and data analysis for vendor performance metrics.