Information Security GRC Analyst
Role Purpose
The An Post Information Security team has a requirement for a governance risk and compliance (GRC) analyst. This role will cover multiple areas of information security including leading An Post’s continued ISO 27001 and PCI DSS certifications and IT risk management activities.
Responsibilities
The principal responsibilities associated with this role include, but are not limited to the following:
For both ISO 27001 and PCI DSS, lead the surveillance and certification audits, liaising with the external assessors and key An Post stakeholders as required.
Coordinate with business units and departments to obtain and validate evidence required, assessing the evidence for completeness to meet the required compliance level.
Identify any compliance gaps, track remediation, and provide regular quality reports on compliance activities to management.
Incrementally improve the evidence collection process and streamline compliance reporting.
Working with the IT and business teams, identify potential IT risks and threats, including cyber threats, data breaches, system failures, and compliance issues.
Conduct thorough risk assessments to determine the likelihood and potential impact of identified risks, in line with the An Post Risk Management Framework.
Continuously monitor and review the effectiveness of risk mitigation strategies.
Ensure compliance with relevant regulatory requirements, industry standards, and An Post policies.
Collaborate with internal audit and compliance teams to ensure effective risk management practices.
Communicate risk information and mitigation strategies to various stakeholders, including IT teams, senior management, and the broader risk and governance forums.
Provide regular risk reports to senior management, highlighting key risks and mitigation efforts.
Identify opportunities to improve and streamline the various IT risk management activities.
Stay up-to-date with emerging IT risks and trends, and the wider information security threat landscape.
Knowledge, Experience and Skills
You will have previous experience in cyber security, IT risk management or a related field with demonstrable experience and understanding of ISO 27001, PCI DSS or other information security framework. Having a certification in Certified Information Systems Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) is preferred.
You will be an excellent communicator, both orally and in writing with the ability to work collaboratively within a team and perform duties with minimal direction.
Critical Competencies
Attention to Detail
Results Orientation
Communication
Building & Maintaining Relationships
About the Benefits
In addition to a highly competitive remuneration package we offer access to the following:
An Post Company Medical Scheme
An Post Pension Scheme
PRIP Bonus Scheme
Paid Maternity Leave
Paid Paternity Leave
An Post Employee Assistance Programme
Digital gym with daily scheduled workouts
Secure on-site bicycle parking & Cycle to Work Scheme
Tax Saver Travel Pass
City centre location
How to Apply?
We welcome all interested candidates to submit a detailed CV to talent@anpost.ie by 5.00pm on 11th July 2024.
At An Post we appreciate the value that diversity brings and believe our workforce should be reflective of the customers and communities we serve. That is why we actively welcome applications from people from all backgrounds, and do not discriminate based on gender, age, race, religion, marital status, sexual orientation, disability, membership of the Travelling community, or family status. An Post is committed to having an inclusive workplace where every employee feels they belong. If you require accommodations to be made during the recruitment process, or have questions relating to accessibility, please contact us at talent@anpost.ie.
About An Post
An Post is one of Ireland’s leading organisations, offering financial and postal services as well as being a trusted gateway to government services. We are transforming from the old world of traditional letters and cash to the new digital world of e-commerce parcels and financial services.
An Post’s core purpose — to act for the common good, improving the lives of people in Ireland, now and for generations to come — is aligned with the United Nations Sustainable Development Goals, putting sustainability at the centre of everything we do. Corporate Social Responsibility plays a pivotal role at An Post as we focus on developing long-term sustainability. Diversity and Inclusion are also embedded in our strategy, as we continuously evolve to be representative of our employees and the communities we serve. Read more about our strategy and our progress today!
