Cyber Security & IT Risk Lead

About the role

The Lead, Cybersecurity and IT Risk is responsible for coordinating and strengthening the organisation's cybersecurity, information security and IT risk management practices at country level. Reporting to the Country Head of Information Technology, the role protects business information, technology assets, digital services and critical operations by identifying risks, implementing controls and supporting incident response.

Key responsibilities

• Support the development and implementation of the country’s cybersecurity and IT risk roadmap, maintaining local policies, standards and procedures.
• Lead or coordinate cybersecurity and IT risk assessments across applications, infrastructure, projects, cloud services and third‑party providers, maintaining the IT risk register and monitoring remediation.
• Monitor the effectiveness of preventive and detective security controls such as endpoint protection, email security, network security, identity controls, security logging and threat monitoring.
• Coordinate country‑level response to cybersecurity incidents, supporting triage, containment, investigation, evidence preservation and post‑incident improvement.
• Manage vulnerability scanning, penetration testing, configuration reviews and remediation tracking for in‑scope technology assets.

Required profile

• Hands‑on cybersecurity knowledge combined with risk management, governance and stakeholder engagement experience.
• Proven ability to work with technology teams, business functions, internal audit, compliance, legal, enterprise risk and external service providers.
• Strong communication skills to ensure risks are understood, owned, treated and reported effectively.
• Experience in coordinating incident response and conducting security testing programmes.

Required skills

• Endpoint protection
• Email security
• Network security
• Identity and access management
• Security logging and monitoring
• Data protection
• Threat monitoring
• Vulnerability scanning
• Penetration testing
• Configuration review