Cyber Security Governance Specialist (GRC)

Description Help shape the future of cybersecurity governance at SSC Cybersecurity is becoming an increasingly important strategic capability. As our business, infrastructure, and international operations continue to evolve, we are strengthening our security organization and moving from a primarily reactive approach to a more proactive, risk-driven, and business-aligned security model. We are now looking for a Cyber Security Governance Specialist to help establish and mature how security is governed, managed, and embedded throughout the organization. This is an opportunity for someone who enjoys connecting cybersecurity with business objectives, translating complex risks into actionable decisions, and helping leaders make informed security choices. You will work closely with the CISO, senior stakeholders, project teams, and technical specialists across SSC, becoming a key contributor to the development of our long-term cybersecurity strategy. Requirements What makes this role stand out?

• High visibility and direct collaboration with executive stakeholders
• Opportunity to influence cybersecurity strategy and governance
• Work across business units, countries, and technical domains
• Help build security capabilities from the ground up
• Shape how risk management and security governance evolve within SSC
• Be part of an expanding cybersecurity function with significant growth ambitions

Your mission As Cyber Security Governance Specialist, you will strengthen SSC's ability to manage cybersecurity risks while ensuring security enables business growth and operational excellence. You will serve as a trusted advisor to both business and technical stakeholders and ensure that cybersecurity requirements are embedded into projects, services, and decision-making processes. Responsibilities Governance & Security Management

• Develop, maintain, and improve cybersecurity policies, standards, and guidelines
• Support the implementation and continuous improvement of the cybersecurity governance framework
• Facilitate security steering activities and governance forums
• Drive initiatives that improve organizational security maturity

Risk Management

• Conduct and facilitate cybersecurity risk assessments
• Maintain and improve risk management processes
• Work with business stakeholders to identify, analyze, and mitigate risks
• Support risk reporting to management and executive leadership

Compliance & Security Assurance

• Support compliance initiatives and internal security assessments
• Assist business units in understanding and meeting security requirements
• Contribute to audit activities and remediation efforts
• Monitor developments in regulatory and industry requirements

Security Advisory

• Provide cybersecurity guidance to business initiatives and projects
• Help design practical and proportional security controls
• Support procurement, vendor assessments, and third-party risk evaluations
• Act as a bridge between security, technology, and business teams

Security Strategy

• Support the development of SSC's cybersecurity roadmap
• Identify opportunities to improve governance processes and security capabilities
• Contribute to long-term security planning and prioritization

Benefits You are a collaborative and pragmatic security professional who understands that good security is achieved through influence, communication, and business understanding. You enjoy working with stakeholders across different disciplines and can translate cybersecurity concepts into language that drives action. You understand both the strategic and operational aspects of cybersecurity and are comfortable balancing risk, compliance, and business needs. What we believe you bring

• University degree or equivalent experience
• Several years of experience within cybersecurity governance, risk management, compliance, or information security
• Experience developing policies, standards, and governance processes
• Strong understanding of cybersecurity risk management
• Experience advising business leaders and project teams
• Excellent communication and stakeholder management skills
• Ability to translate technical risks into business language
• Experience from consulting environments is highly valued