Vitol Cybersecurity Governance, Risk and Compliance

The Governance and Risk Officer will join Vitan's cybersecurity team, helping the global energy trader keep its digital environment secure and aligned with internal policies and external regulations. The role focuses on Vitan affiliates, ensuring they follow the company's cyber‑security standards while supporting a culture of security across the organisation. Each day the officer will verify that legal and regulatory obligations are met, draft and update security policies, and monitor their implementation. They will carry out risk assessments, catalogue information assets, and manage the cybersecurity Control Catalog. The position also involves conducting internal security audits, responding to external audit requests, and overseeing third‑party assessments, which requires occasional travel to affiliate sites. The ideal candidate brings at least three years of hands‑on experience in cybersecurity, especially in auditing, governance and risk management. A solid grasp of regulatory frameworks such as NIS2 and an understanding of modern security architecture and incident‑response best practices are essential. Relevant certifications (CRISC or CISA) and familiarity with recognised control and cybersecurity frameworks, including CIS Controls, NIST SP 800‑53, NIST CSF and ISO 27001, are required. The role offers exposure to a multinational environment and may involve work beyond standard business hours. Candidates should be analytical, communicative and able to operate both independently and within a team. Travel to Vitan affiliate locations is part of the job, providing a varied and dynamic work setting. What the role asks for: - 3+ years cybersecurity experience (auditing, governance, risk) - Understanding of regulatory requirements such as NIS2 - Knowledge of modern security architecture and incident‑response best practices - Relevant security certification (CRISC or CISA) - Familiarity with security control frameworks (CIS Controls, NIST SP 800‑53) - Familiarity with NIST CSF framework - Familiarity with ISO 27001 framework - Nice‑to‑have: Willingness to travel to Vitan affiliate locations