Position Overview
The Cybersecurity Compliance Transition Expert – M&A is responsible for ensuringcompliance checks for all systems during transitions to our environment, includingmergers and acquisitions. This role also involves managing exceptions to cyber policiesin conjunction with the Regulatory Compliance Manager, monitoring key performanceindicators (KPIs) and key risk indicators (KRIs) for cybersecurity, and supporting internaland external audits. The ideal candidate will have a strong understanding ofcybersecurity policies and regulatory requirements, and will be adept at coordinatingcompliance activities during system transitions and mergers.
Key Responsibilities
- Compliance Checks During Transition and Mergers & Acquisitions
- Conduct thorough compliance checks for all systems transitioning to our
environment, including those involved in mergers and acquisitions.
- Ensure that all systems meet the required cybersecurity standards and
regulatory requirements during the transition process.
- Collaborate with IT and transition teams to identify and address any
compliance issues.
- Policy Exception Management
- Manage exceptions to cybersecurity policies, ensuring that all deviations
are documented, justified, and approved.
- Work closely with the Regulatory Compliance Manager to ensure that
policy exceptions are handled in accordance with regulatory
requirements.
- Conduct regular reviews of policy exceptions to assess risk and
recommend mitigation strategies.
- Monitoring and Reporting
- Monitor cybersecurity KPIs and KRIs to track the effectiveness of security
measures and identify areas for improvement.
- Prepare and present regular reports on cybersecurity metrics to senior
management and stakeholders.
- Audit Support
- Provide support for internal and external audits related to cybersecurity
compliance.
- Coordinate with auditors to provide necessary documentation and
evidence of compliance.
- Assist in the remediation of audit findings and implementation of
corrective actions.
Qualifications
- Education: Bachelor's degree in Information Security, Computer Science, or a
related field.
- Experience: Minimum of 5 years of experience in cybersecurity compliance, risk
management, or a related area.
- Certifications: Relevant certifications such as CISSP, CISM, or CISA are
preferred.
Skills
- Strong understanding of cybersecurity policies and regulatory
compliance requirements.
- Excellent analytical and problem-solving skills.
- Ability to manage multiple tasks and projects simultaneously.
- Effective communication and interpersonal skills.
- Proficiency in using cybersecurity tools and technologies.
Interested candidates can share their updated resume to
rolly.martin@thompsonshr.com