Information Security Governance Risk & Compliance Assoc. Mgr.

• Information Security Governance Risk and Compliance – Associate Manager
• Job Type: Full Time
• Reports to: Director of Information Security & IT Governance

POSITION OVERVIEW

• This Information Security GRC Expert – Associate Manager contributes to Morae success by
• implementing, and maintaining people, process and technology-oriented policies, procedures, and
• controls to ensure ongoing security and compliance of Morae’s innovative technology solutions and
• information assets.
• As a part of highly skilled Information Security team the role will focus on all areas of information
• security governance, risk, and compliance for both our corporate IT environment as well as our
• innovative client technology solutions serving some of the world’s largest corporations.
• The role will concentrate on maintaining both technology and procedural aspects of our ISO27001 and
• SOC 2 Type II Regimes, Client Security Compliance, Third Party Risk Management, and Staff Security
• Awareness efforts. In addition, the role will contribute to defining and developing both process and
• toolsets for Data Classification, Data Loss Prevention, Data Privacy and Data Segregation in our
• environments.
• Working closely with Director of Information Security, global security operations and wider technology
• teams GRC Associate Manager will contribute to development and review of Global Information
• Security Strategy, IT Risk Registers and support the work of Risk Management Committee.
• The GRC Associate Manager will be coaching and developing junior members of Information Security
• GRC team. We are looking strong Information Security expert ready to develop both their technical
• and GRC skillset to step up their career onto strategic management level.

KEY RESPONSIBILITIES

• Contribute to maintenance and development of information security systems, policies and

procedures through implementation and maintenance of policies and identification of gaps

or non-compliance.

• Assist with the development, implementation, and improvement of the Morae Global

technical security processes.

• Ensuring Morae Global policies, applicable standards, customer requirements and best

practices are being followed.

• Supporting the delivery of information security projects and initiatives.
• Represent Morae Global in a professional and productive way while delivering the best in

service to our clients and during interactions with both clients and suppliers.

• Supporting the wider information security and technology team on providing a responsive

and pragmatic approach to day-to-day security issues and broader strategic initiatives

• Ensure security documents are controlled, reviewed, and updated in line with various

contractual and regulatory requirements.

• Develop and lead global information security awareness activities.
• Deliver related security communication across the organisation as required.
• Capturing evidence to support audit and compliance requirements.
• Provide support in responding to client security requests and client assurance assessments

and audits.

• Refine and maintain security dashboards and reports to support the production of security

metrics and quarterly security reporting.

• Initiate continuous improvement ideas and suggestions to increase efficiencies.
• Actively participate in wider, internal, and external information security initiatives.

SKILLS/EXPERIENCE

• Bachelor’s degree and 5+ years of experience of working with security, privacy and legal in a

regulated environment.

• Manage relationships with senior stakeholders in support of technology.
• Demonstrable experience of implementing ISO27001 and SOC 2 Type II Security compliance

frameworks.

• Demonstrable experience and knowledge of Data Governance, Data Classification, Data Loss

Prevention technical and process implementations.

• Experience in Data Privacy Regulatory Compliance implementations – GDPR, POPI, DPDP.
• Excellent English language written and verbal communication skills.
• Ability to write clear and concise policy documentation.
• Strong communication and presentation skills.
• Collaboration and conflict management skills.
• Experience in legal sector, eDiscovery and Document Management architecture would be

advantageous.

• Understanding of IT systems and security tools, including methods, procedures, equipment,

and software used for delivery.

• Planning, and strategic management skills.

• Why Morae?
• Morae’s approach to employee development is unique in the marketplace. At Morae employees are
• given opportunities to progress at their own pace and to influence the course of their professional
• growth. This includes having the opportunity to earn a client facing role or even an oversight role
• within their first year!

About Morae

• Morae is a dynamic, high-growth organization that provides an integrated suite of solutions to
• corporate law departments and law firms, and partners with leading software and services
• providers, both within and outside the legal industry. We are a young company but are made up of
• seasoned professionals in the legal industry, with a focus on building productive long-term
• relationships with employees and clients in an environment where collaboration is encouraged,
• knowledge is shared freely, and diversity of thought, cultures, communities, and points of view is
• embraced. Our team has the vision to create an effective solution for any business problem and the
• experience to execute that vision. Learn more at moraeglobal.com. Our privacy policy can be found
• here https://www.moraeglobal.com/privacy-policy.