Security Governance Officer Job Requirements

A Security Governance Officer is responsible for the implementation of executive management and Board of Director's information security agenda/strategy or objectives within an organization. He/she provides oversight on all information security activities within the organization in ensuring that IT remains an enabler of the business and information and technology related risk are managed within the organization's risk appetite. He/she also ensures that robust information security programs and strategies are developed and maintains for compliance with the organization's information security policies, applicable laws, regulatory requirements and best practices. He/she ensures the implementation of governance structures approved by executive management and the Board of Directors within the IT organization for the realization of enterprise goals. He/she develops and maintains the information security strategy for the organization and ensure alignment with the enterprise strategy and goals through robust risk management of IT business. A security governance officer Coordinates activities of the IT Security Steering committee were applicable and ensures that activities and decisions of the committee are documented, implemented and monitored for compliance. He/she plan and submit budget for resources required to close security gaps identified during risk assessment of IT infrastructure and processes, internal audits and vulnerability assessment/scans. Monitor projects (change initiatives) to identified and fix security gaps as well as improve system availability and usability.

A Security Governance Officer also coordinate development, maintenance and monitoring of security policies and procedures across the organization while ensuring that such policies conform to regulatory standards and other relevant information security frameworks such as NIST (National Institute of Standards and Technology), COBIT (Control Objectives for Information and Related Technologies), ISO/IEC 27K series.

Reporting line of a Security Governance Officer

A Security Governance Officer could report to the CISO or CIO of an organization.

Professional Certifications for Security Governance Officer

To be endorsed as an Security Governance Officer, practitioners must acquire certification such as Certified in Governance of Enterprise IT (CGEIT) by ISACA, COBIT 5 Foundation/Implementer/Assesor by ISACA, Certified in Risk and Information Systems Control (CRISC), among others.

Back To Information and Cyber Security Jobs

Back To Top IT Jobs of the 21 Century

Learn More About Our Valuable IT Audit Programs/Checklists

Learn More About Our Valuable Risk Assessment & Treatment Templates

IT Audit, IT Risk and Cyber Security eBooks

Auditing Your Information Systems and IT infrastructure: Practical Audit Programs/Checklists for Internal AuditorsGet Now
IT Infrastructure Risk & Vulnerability Library: A Consolidated Register of Operational & Technology Infrastructure Vulnerabilities for IT Assurance ProfessionalsGet Now
Auditing Your Payment Cards Processes, Systems and Applications: A Step By Step PCIDSS Compliance Audit Program For Brands, Issuers, Acquirers, ProcessorsGet Now
Auditing Your Windows Infrastructure, Intranet And Internet Security: A Practical Audit Program for Assurance ProfessionalsGet Now

Let us know your thoughts post. Leave a Comment below.