Security Governance Officer Job Requirements

A Security Governance Officer is responsible for the implementation of executive management and Board of Director's information security agenda/strategy or objectives within an organization. He/she provides oversight on all information security activities within the organization in ensuring that IT remains an enabler of the business and information and technology related risk are managed within the organization's risk appetite. He/she also ensures that robust information security programs and strategies are developed and maintains for compliance with the organization's information security policies, applicable laws, regulatory requirements and best practices. He/she ensures the implementation of governance structures approved by executive management and the Board of Directors within the IT organization for the realization of enterprise goals. He/she develops and maintains the information security strategy for the organization and ensure alignment with the enterprise strategy and goals through robust risk management of IT business. A security governance officer Coordinates activities of the IT Security Steering committee were applicable and ensures that activities and decisions of the committee are documented, implemented and monitored for compliance. He/she plan and submit budget for resources required to close security gaps identified during risk assessment of IT infrastructure and processes, internal audits and vulnerability assessment/scans. Monitor projects (change initiatives) to identified and fix security gaps as well as improve system availability and usability.

A Security Governance Officer also coordinate development, maintenance and monitoring of security policies and procedures across the organization while ensuring that such policies conform to regulatory standards and other relevant information security frameworks such as NIST (National Institute of Standards and Technology), COBIT (Control Objectives for Information and Related Technologies), ISO/IEC 27K series.

Reporting line of a Security Governance Officer

A Security Governance Officer could report to the CISO or CIO of an organization.

Professional Certifications for Security Governance Officer

To be endorsed as an Security Governance Officer, practitioners must acquire certification such as Certified in Governance of Enterprise IT (CGEIT) by ISACA, COBIT 5 Foundation/Implementer/Assesor by ISACA, Certified in Risk and Information Systems Control (CRISC), among others.