IT Security Governance Officer

The IT Security Governance Officer is responsible for establishing and enforcing information security governance frameworks within a government entity. The role ensures compliance with national cybersecurity regulations, government policies, and international standards, while supporting risk management, audit readiness, and secure delivery of digital government services.

Required Skills and Competencies

• Strong knowledge of government cybersecurity governance and regulatory environments
• Experience with public sector IT policies and compliance frameworks
• Risk management, audit coordination, and compliance monitoring skills
• Strong documentation, reporting, and policy-writing abilities
• Ability to communicate security risks in a non-technical, executive-friendly manner
• High integrity and attention to confidentiality requirements

Qualifications

• Bachelor’s degree in information security, IT, Computer Science, or a related field
• 4–7 years of experience in information security governance, risk, or compliance (public sector preferred)
• Professional certifications preferred:
• CISM
• CISSP
• ISO 27001 Lead Implementer / Auditor
• CRISC
• Knowledge of national cybersecurity policies and government data protection laws
• Develop, implement, and maintain government-aligned information security policies, standards, and procedures
• Ensure compliance with national cybersecurity regulations, data protection laws, and government directives
• Align IT security governance with recognized frameworks (ISO 27001, NIST, COBIT, government cybersecurity standards)
• Conduct information security risk assessments and support risk treatment plans
• Monitor compliance with security controls across government systems and entities
• Coordinate internal and external audits, regulatory reviews, and compliance assessments
• Track security risks, exceptions, and remediation actions
• Support governance aspects of cybersecurity incidents, reporting, and post-incident reviews
• Review third-party and vendor security compliance for government contracts
• Ensure data classification, access control, and information handling policies are enforced
• Support cybersecurity awareness and mandatory government training programs
• Prepare governance reports, dashboards, and compliance submissions for senior management
• Collaborate with legal, compliance, IT, and national cybersecurity authorities