Governance, Risk & Compliance Officer

Vitol is a global energy and commodities company, specializing in the trading and distribution of energy products. With a revenue of $331 billion in 2024, Vitol handles over seven million barrels of crude oil and products daily, using a fleet of 250 ships. The company serves a diverse client base, including national oil companies, multinationals, and leading industrial companies, from offices worldwide. The Governance, Risk & Compliance Officer will focus on ensuring the organization's robust security posture, compliance with relevant policies, and fostering a culture of security. Key responsibilities include ensuring compliance with laws and regulations, developing and enforcing security policies, and conducting risk assessments. The role also involves maintaining information asset inventories, performing security audits, and managing cybersecurity controls. Additionally, the officer will ensure that Vitol affiliates comply with Vitol's cybersecurity policies and standards, which may require travel to affiliate locations. To excel in this role, candidates must have at least three years of professional experience in cybersecurity, with a focus on auditing, governance, and risk management. A strong understanding of regulatory requirements and industry standards, such as NIS2, is essential. Relevant security certifications, such as CRISC or CISA, are required. Familiarity with security control frameworks like CIS Controls, NIST Special Publication 800-53, and cybersecurity frameworks like NIST CSF and ISO27001 is also necessary. Nice-to-have skills include a strong ethical standard, excellent judgment, and attention to detail. The ability to work independently and as part of a team, along with strong communication and interpersonal skills, is crucial. The role may require working beyond normal business hours and a user/business focus. The position is based in a dynamic and global environment, offering opportunities for professional growth and development. The team is highly responsive, energetic, and enthusiastic, with a strong emphasis on analytical thinking and problem-solving. What the role asks for: - 3+ years of professional experience in Cybersecurity, with a focus on audits, governance and risk management. - Strong understanding of regulatory requirements and industry standards (e.g. NIS2). - Relevant security certifications such as CRISC, CISA. - Knowledge of security control frameworks: CIS Controls, NIST Special Publication 800-53. - Knowledge of Cybersecurity Frameworks: NIST CSF, ISO27001. - Ability to work beyond normal business hours.