Cyber Security & GRC Expert

About the role

The Cyber Security & GRC Expert will lead the execution of OQ8's cybersecurity programs, acting as the owner of security standards and solutions. Reporting to the Manager of Outsource Service Management, the role ensures the protection of networks, data, and OT/IT environments while supporting risk management and business continuity.

Key responsibilities

• Maintain and monitor the security of OQ8's networks, data, and systems, reporting issues to management.
• Develop, maintain, and enforce cybersecurity policies and standards for IT and OT.
• Assess and document the company’s compliance and risk posture related to information assets.
• Conduct information security control assessments and author security specifications.
• Support system‑wide risk management, ensuring risks are identified, quantified, and monitored.
• Lead GRC projects, privacy assessments, and the information security awareness program.
• Ensure IT activities, processes, and procedures meet regulatory and policy requirements.
• Review risk assessments, analyze control effectiveness, and provide actionable recommendations.

Required profile

• Strong knowledge of cybersecurity governance, risk, and compliance (GRC) frameworks.
• Experience in assessing and improving information security controls for both IT and OT environments.
• Proven ability to lead security policy development and implementation.
• Excellent communication skills for interacting with stakeholders and auditors.
• Understanding of business continuity, disaster recovery, and privacy assessment processes.

Required skills