Cyber Resilience Compliance Analyst

Overview

• As a Cyber Resilience Compliance Analyst, you will plan and lead the execution of compliance reviews and gap assessments.
• You will measure compliance against regulatory standards as well as internal policies and regulations.
• The role also contributes to the development and implementation of cybersecurity governance framework, policies and procedures, and driving compliance and remediation.
• In this role you will:
• Conduct audit and assessments to identify gaps in compliance with relevant regulatory standards e.g. ISMS, EU-GDPR, UK DPA, PCI-DSS, ISO 27001, and UAE ISR from DESC.
• Oversee internal and external audits, manage audit remediation tracking, establish and drive KPIs, and drive remediation efforts.
• Support the implementation of new compliance requirements including but not limited to the documentation, adoption and ongoing adherence.
• Oversee compliance evidence collection and work with business units to gather and verify evidence for compliance assessments.
• Develop, improve and streamline compliance evidence collection tools and procedures and escalate to management findings and non compliance issues.
• Communicate evolving regulatory requirements and the compliance status (PCI DSS and EU-GDPR) to IT, Data Privacy Office, business units, and enterprise executives, management, and liaisons.
• Collaborate regularly with assessors and auditors in identifying compliance gaps and implementing corrective actions and adjusting the compliance program as needed.
• Work closely with business units and vendors to ensure adherence to compliance program requirements.
• Challenge and validate assessment decisions from both internal business units as well as external partners/vendors, drive and oversee continuous improvements