Position: Governance, Risk and Security Compliance Specialist
Company: KSTT
Experience required: 1y
English level: upper

**Description of the position and responsibilities:**

•	Governing security documentation including security policies, procedures, baselines, guidelines, and standards and ensuring they are reviewed and updated annually and upon request/business need 
•	Ensuring the delivery of a company-wide security awareness training
•	Security risk assessments as part of ISO 27001 and/or for non-audited offices when required 
•	Conducting security risk assessments for third parties including the security part of Data Protection Impact Analysis
•	Supporting external audits including ISMS audits

**﻿Necessary skills and experience:**

•	1+ years of experience in IT security or related areas 
•	Understanding of international security related standards, like ISO27001, NIST, PCI DSS, GDPR etc.