Summary:
We are looking for a Cyber Security GRC Analyst to support our Information Security Governance, Risk, and Compliance (GRC) activities. The ideal candidate will have hands-on experience in information security frameworks, risk assessments, audits, compliance management, policy development, and third-party risk management.
The candidate will work closely with internal stakeholders, technology teams, vendors, auditors, and management to ensure that security controls and processes are effectively implemented and aligned with applicable regulatory, contractual, and industry requirements.
Experience: 2–5 Years
Required Skills
- 2–5 years of experience in Information Security, GRC, Cyber Security, IT Risk, or Compliance.
- Good understanding of ISO/IEC 27001 and information security controls.
- Experience with risk assessments, control assessments, audit management, and compliance activities.
- Experience in third-party/vendor risk management.
- Good understanding of ITGC and security control testing.
- Experience in preparing and maintaining security policies and procedures.
- Strong understanding of audit evidence and remediation processes.
- Good written and verbal communication skills.
- Ability to work with multiple stakeholders across IT, business, compliance, and security teams.
- Strong documentation, analytical, and problem-solving skills.