At a Glance
- Tasks: Ensure cybersecurity compliance and manage risks across the organisation.
- Company: Vitol, a leading energy and commodities company with a global presence.
- Benefits: Competitive salary, travel opportunities, and a dynamic work environment.
- Other info: Opportunity for career growth in a fast-paced, innovative industry.
- Why this job: Join a vital role in safeguarding our digital landscape and making a real impact.
- Qualifications: 3+ years in cybersecurity with strong auditing and risk management skills.
The predicted salary is between 40500 - 49500 £ per year.
Company Description
Vitol is an energy and commodities company with revenues of $331 billion in 2024; its primary business is the trading and distribution of energy products globally - it trades over seven million barrels per day of crude oil and products and, at any time, has 250 ships transporting its cargoes.
Vitol's clients include national oil companies, multinationals, leading industrial companies and utilities.
Founded in Rotterdam in 1966, today Vitol serves clients from some 40 offices worldwide and is invested in energy assets globally including 24m M3 of storage, 850kbpd of refining capacity, and 10,000 service stations.
To date, we have committed over $2.5 billion of capital to renewable projects and are identifying and developing low-carbon opportunities around the world.
Job Description
The Governance and Risk Officer help ensure that the organization maintains a robust security posture, complies with relevant policies and standards, and fosters a culture of security among employees.
Key Responsibilities
- 1. Governance and Compliance
- Ensure compliance with relevant laws, regulations, and standards when required.
- Develop, enforce, review, and monitor compliance and update security policies, standards, and procedures.
- 2. Risk Management
- Assist in Identifying and assessing risks across the organization.
- Conduct risk assessments, identify potential security risks, and implement mitigation strategies.
- Monitor and report on risk exposure and mitigation efforts.
- 3. Information Asset Inventories and Control Management
- Maintain information asset inventories including categorization, critical assets, risks, and security controls in place.
- Ownership of the cybersecurity Control Catalog and ensure controls are applied.
- 4. Security Auditing
- Perform security audits, internally and respond to external audit demands.
- Perform 3rd Party audits and maintain an inventory of vetted suppliers and tools.
- 5. Portfolio Companies
- The focus for this position will be Vitol affiliates.
- This position will ensure that Vitol affiliates remain compliant with Vitol Cybersecurity policies and standards.
- This position requires traveling to Vitol affiliates locations.
Qualifications
- 3+ years of professional experience in cybersecurity, with focus on auditing, governance, risk management.
- Strong understanding of regulatory requirements and industry standards (eg. NIS2)
- Knowledge of best practices in modern security architectures and incident responses
- Relevant security certifications such as CRISC, CISA.
- Familiarity with security control frameworks: CIS Controls, NIST Special Publication 800-53
- Familiarity with cybersecurity frameworks: NIST CSF, ISO27001
- Personal Characteristics
- Highly responsive, energetic and enthusiastic
- Analytical thinking and problem-solving skills.
- Ability to work independently and as part of a team.
- Strong ethical standards and integrity.
- Capable of prioritising tasks and meeting critical deadlines
- Excellent judgment, attention to details
- Excellent communication and interpersonal skills
- Expect duty to expand beyond normal business hours.
- User/business focus
- #J-18808-Ljbffr
Cybersecurity Governance, Risk and Compliance in City of London employer: Vitol
Vitol Group is an exceptional employer, offering a flat and non-bureaucratic work culture that fosters collaboration and innovation. As a Web and Content Manager, you will benefit from comprehensive training and mentorship, while being immersed in the dynamic energy sector. With a central London location, you'll enjoy modern facilities and ample opportunities for career progression within a global business environment.
StudySmarter Expert Advice🤫
We think this is how you could land Cybersecurity Governance, Risk and Compliance in City of London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Vitol, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Vitol
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Vitol. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Cybersecurity Governance, Risk and Compliance in City of London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Vitol insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Vitol that you’re committed to staying ahead in the game.
How to prepare for a job interview at Vitol
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Vitol to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Vitol.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
