Qualifications

• Bachelor's degree in information security, information technology, or a related field.
• Minimum of 6 years of experience in information security or IT risk management, including governance, risk, and compliance (GRC).
• Experience in financial institutions or investment sectors is a plus.
• Professional certifications (CISSP, CISM, CISA, CRISC, CGEIT) are a plus.
• Strong understanding of security frameworks (ISO 27001, NIST, CIS, COBIT).
• Familiarity with technological environments (applications, systems, networks) and Agile/DevSecOps practices.
• Practical experience with data visualization tools (e.g., PowerBI).
• Strong analytical skills and problem-solving abilities.

Responsibilities

• Define, maintain, and update security policies, procedures, standards, and controls in line with industry best practices.
• Contribute to the evolution of the governance and risk management framework, integrating emerging issues such as artificial intelligence.
• Develop and promote guidelines for the safe and responsible use of AI and emerging technologies.
• Identify and implement opportunities to optimize GRC activities using AI for automation and decision support.
• Conduct risk assessments (technologies, projects, vendors) and follow up on the implementation of appropriate mitigation measures.
• Assist in internal and external audit activities, certification, and security testing, including tracking gaps and remediation planning.
• Support the implementation of security awareness and training programs.
• Define, monitor, and analyze key indicators (KRI/KPI) and produce dashboards to aid decision-making.
• Keep abreast of security and AI trends, actively participating in the evolution of GRC practices.

Benefits

• Opportunity to work with cutting-edge AI technologies and contribute to security advancements.
• Collaborative environment working with diverse teams across the organization.
• Opportunity to influence the evolution of security governance frameworks and practices.
• Professional development opportunities in the fields of security and risk management.
• Support for continuous education and obtaining professional certifications.