Governance, Risk & Compliance Officer

Job Description

The Governance and Risk Officer help ensure that the organization maintains a robust security posture, complies with relevant policies and standards, and fosters a culture of security among employees.

Key Responsibilities:

1. Governance and Compliance:

• Ensure compliance with relevant laws, regulations, and standards when required.
• Develop, enforce, review, and monitor compliance and update security policies, standards, and procedures.

2. Risk Management:

• Assist in Identifying and assessing risks across the organization.
• Conduct risk assessments, identify potential security risks, and implement mitigation strategies.
• Monitor and report on risk exposure and mitigation efforts.

3. Information Asset Inventories and Control Management

• Maintain information asset inventories including categorization, critical assets, risks, and security controls in place.
• Ownership of the cybersecurity Control Catalog and ensure controls are applied.

4. Security Auditing:

• Perform security audits, internally and respond to external audit demands.
• Perform 3rd Party audits and maintain an inventory of vetted suppliers and tools.

5. Portfolio Companies

• The focus for this position will be Vitol affiliates.
• This position will ensure that Vitol affiliates remain compliant with Vitol Cybersecurity policies and standards.
• This position requires traveling to Vitol affiliates locations.