Cybersecurity Business Partner

Position Summary

The Cybersecurity Business Partner Senior Specialist bridges business teams and the Cybersecurity division to ensure alignment, manage risks, and support compliance with cybersecurity requirements.

Roles and Responsibilities

• Act as the primary liaison between business units and the Cybersecurity Division to ensure effective communication and coordination on all cybersecurity-related initiatives.
• Participate in Cybersecurity Governance, Risk, and Compliance (GRC) activities, including the development, maintenance, and improvement of cybersecurity policies and processes.
• Support business projects and digital initiatives by identifying cybersecurity requirements early in the project lifecycle and coordinating security assessments.
• Facilitate Cybersecurity Risk Assessments for business services and ensure mitigation plans are developed and tracked in coordination with Risk Owners and the GRC team.
• Monitor and track cybersecurity findings, compliance gaps, and audit recommendations to ensure timely closure.
• Prepare regular Cybersecurity Business Partner reports and dashboards, summarizing risks, issues, and achievements for management review.
• Coordinate with Cybersecurity Assurance, SOC, and GRC teams to ensure continuous improvement and visibility of the organization’s cybersecurity posture.
• Represent the Cybersecurity Division in business meetings and steering committees to ensure cybersecurity is embedded in strategic and operational decisions.
• Contribute to the execution of the Cybersecurity Awareness and Training Program by promoting a cybersecurity culture within business units.
• Maintain an up-to-date understanding of NCA frameworks (ECC, TCC, CSCC, OSMACC, CCC, DCC) and ensure alignment between business operations and national cybersecurity requirements.

Education and Experience

• Bachelor’s degree in Computer Science, Information Technology, or related field [Information/Cybersecurity preferred].
• Strong understanding of cybersecurity governance, risk management, and compliance frameworks.
• Proven ability to communicate cybersecurity concepts effectively to non-technical business stakeholders.
• Experience facilitating collaboration between business teams and cybersecurity functions.
• Ability to identify, evaluate, and manage cybersecurity risks in alignment with organizational goals.
• Excellent analytical and reporting skills; able to prepare clear and concise executive summaries.
• Strong interpersonal and negotiation skills to balance business priorities with cybersecurity requirements.
• Certifications such as CRISC, ISO/IEC 27001 Lead Implementer or Lead Auditor, or other relevant cybersecurity governance certifications are desirable.
• Strong oral and written communication skills; capable of working under pressure and managing multiple priorities.