Governance Risk and Compliance Specialist (IT Security)

Governance Risk and Compliance Specialist (IT Security) (Attica)

The world of energy is constantly growing and evolving! At PPC (Public Power Corporation), we are looking for people with enthusiasm, knowledge, and positive energy, who want to take their careers one step further. With a team spirit, trust, and empathy, we strive to create a work environment with equal opportunities and respect for everyone, without discrimination.

If you are interested in your personal and professional development in an environment with a pleasant atmosphere and favorable benefits, we invite you to submit your application today. Your future is here!

Find your place in the world of energy. Apply now!

Responsibilities

• Coordinates the periodic review of the Information Security Framework and the Information Security Risk Assessment Framework, ensuring that they are kept up to date in accordance with the organization’s requirements
• Supports the development, documentation and updating of information security policies and procedures and monitors their implementation in collaboration with the relevant teams
• Conducts risk assessments and gap analyses to identify security threats. Participates in the development of risk mitigation plans and monitors their implementation, ensuring the proper application of the Information Security Framework
• Assesses vendor security risks, examining the extent to which their activities are aligned with the organization’s Information Security Framework
• Supports the maintenance of the organization’s security risk register
• Develops risk mitigation plans and monitors the implementation of corrective actions
• Supports the preparation of documentation for internal and external information security compliance audits, in accordance with applicable regulatory requirements and contributes to the preparation of periodic reports for management
• Monitors developments and recent changes in the Regulatory Framework, as well as developments in international standards and best practices in the field of cybersecurity

Requirements

• Bachelor’s degree from a University or College or Technological Educational Institute in Sciences, Technology, Computer Science or Computer Engineering
• Master’s degree in Computer Science or Information Security will be considered an additional qualification
• At least five (5) years of relevant experience in Governance, Risk and Compliance (GRC), with proven experience in ensuring and monitoring compliance with standards and regulatory frameworks, conducting gap assessments, managing findings and remediation plans and collaborating with internal and external auditors
• At least two (2) years of experience in information security and cybersecurity, specifically in the development and maintenance of Information Security Framework and security policies, the management of relevant regulatory requirements (e.g., NIS2, DORA, ADAE) and the conduct of information security risk assessments, applying international standards and best practices (e.g., ISO/IEC 27001)
• Experience in the Energy sector will be considered an additional qualification
• Knowledge of Cybersecurity-related regulatory and compliance frameworks
• Information security certification (e.g., Certified Information Systems Security Professional (CISSP), GIAC Security Expert (GSE)) will be considered an additional qualification
• Good knowledge of the English language
• Availability in case of emergency (upon phone contact)

Competencies

• Accountability and result orientation
• Cross-functional collaboration
• Problem-solving and decision-making
• Negotiation and influence
• Understanding of business environment
• Change management

Benefits

• Inclusive working environment
• Continuous training and participation in development activities
• Group health and life insurance program
• Reduced electricity consumption invoice