Information Governance Officer

at  Discovery Ltd

Business Unit: Discovery Central Services
Function: Information Security
Date: 5 Apr 2024
Discovery – Information Governance and Security
Information Governance Officer

PERSONAL ATTRIBUTES AND SKILLS

• Strong negotiation skills
• Excellent knowledge of Risk, Legal and technology environments
• The ability to articulate security in non-technical business impact terms
• Excellent written and oral presentation skills, ability to lead discussions
• Business Writing Skills, Presentation and Facilitation Skills
• Customer Service Orientation, Result Orientation, Negotiation skills
• Personal organisation and time management skills
• Professional Communication (written, verbal/presenting and listening)
• Interpersonal skills - Ability to build relationships with people from all different backgrounds and at different job levels

QUALIFICATIONS & EXPERIENCE

• Basic IT qualifications (A+, N+ or equivalent)
• proven experience
• Documentation and business writing skill
• Risk-related industry-standard qualifications such as CISA, CISM or CGEIT would be a strong recommendation.
• IT related Diploma / Degree
• NIST, COBIT, ISO2700X, and ITIL
• CRISC, CGEIT (understanding of or experience in)
• 5+ Years experience in information technology
• Working knowledge of and/or experience with Risk and compliance
• Working knowledge of applicable industry standards, legislations, etc
• Experience in compliance frameworks for Information Security, Compliance & IT Governance Standards: ISO27001, PCI-DSS, COBIT, King III/IV, NIST
• Strong risk assessment/audit capabilities with hands on experience in many technologies and platforms across a broad range of industries.

The Information Governance Officer (IGO) supports the Group Chief Information Security Officer through the Deputy CISO, with all IT governance and control related functions. Responsible for ensuring that the appropriate policies, procedures, standards, RACI charts and practices for conformance with the respective governance frameworks and mandatory legislation and regulations, are in place as defined.
Work closely with information technology, privacy and security personnel to establish and conduct oversight on approach to the use of information and associated technologies.