Governance, Risk, and Compliance Specialist

Job description / Role

Travel, Hotel & Tourism

Synopsis

As part of the Governance, Risk, and Compliance (GRC) team, this role is open to candidates across various experience levels—from entry-level to seasoned professionals. The position is responsible for supporting the implementation of the security risk management process, procedures, and guidelines, including identifying, assessing, and controlling risks.

This role offers opportunities for entry-level candidates to gain hands-on experience in risk management and compliance, while more experienced professionals will take a leadership role in audits, risk strategy, and the development of governance frameworks.

• Assist the implementation of the security governance, risk and compliance program as directed with a focus on industry regulations and standards, data privacy and internal policies and standards compliance.
• Operate the enterprise-owned tools that support governance, risk and compliance activities and support service providers in delivering contractual security requirements.
• Identify and evaluate IT security risk factors and ensure adequate and effective IT security controls exist that mitigate these risks and meet current and future compliance requirements.
• Demonstrate knowledge of IT security regulatory requirements like NESA, ISO 27001, PCI DSS, GDPR, ADHICS, etc.
• Provide assurance that IT security risks are effectively identified and addressed in relation to deployment of new or enhancements in existing information systems and processes.
• Provide support in coordination activities as required for the IT security component of both internal and external audits.
• Support in the development, review and publishing of content for security awareness themes and conduct security awareness trainings and simulation exercises.
• Support the vulnerability detection and remediation program with a focus on vulnerability prioritization and remediation with creation of timely reports and dashboards.
• Facilitate the development of remediation plans and the timely resolution of any identified gaps.
• Proactively seek opportunities to improve the efficiency and effectiveness of the IT security compliance program.
• Act as a channel of communication to IT to receive and direct compliance issues to appropriate IT resources for investigation and resolution.
• Develop, review and revise information security policies and supporting standards aligned with applicable industry best practices and regulations.

• Graduate degree in Computer Science, Management Information Systems or equivalent.
• A minimum of 5 years of experience in Cybersecurity.
• Knowledge of industry best practice standards pertaining to Information Security, risk management and data privacy.
• Knowledge of and experience with Information Security and GRC tools required.
• Understanding of international and local regulations pertaining to Aviation, Information Security and data privacy.
• Ability to manage execution of projects by security services providers and internal teams.
• Ability to learn and adapt quickly to new cybersecurity technologies and skills.
• Very good written and oral communication skills required.

About Etihad Airways

All this ties into Etihad's ambitious Journey 2030 strategy. The airline plans to double its fleet size and triple the number of customers over the next six years as it sets out to be the airline everyone wants to fly!

Recruitment Fraud Alert

If you are asked for money, please treat it as fraudulent.

About the Company

Etihad Airways is the National Airline of the United Arab Emirates. The airline was set up by a Royal Decree in July 2003, with Abu Dhabi, the capital of the UAE, as its hub. Etihad started commercial operations in November 2003.

With Etihad, everyone who flies with us is welcomed as our guest.

This simple credo illuminates everything we do, from big things like making sure that our fleet is one of the most advanced in the sky, to small touches like letting you choose the films you watch.

Were proud to be the National Airline of the United Arab Emirates. At the crossroads between Europe and Asia, our home reflects our commitment to bringing the world closer together - as does our highly cosmopolitan staff.

Apply Now