GRC Analyst / Consultant / Specialist / Manager - Cyber Security

Key Responsibilities :

• Act as a subject matter expert on information and cybersecurity GRC services and solutions.
• Conduct security assessments of on-premise and cloud-based IT environments aligned with business goals and compliance standards.
• Test and validate IT security controls; document findings and prepare detailed reports for stakeholders.
• Execute internal audits under CISO directives, contribute to risk mitigation strategies, and present risk metrics to the CISO regularly.
• Apply working knowledge of the Digital Personal Data Protection Act, 2023 and global data protection regulations such as GDPR.
• Manage and utilize GRC tools and platforms for assessments and reporting.
• Perform security control evaluations on enterprise systems, mobile, and web applications.
• Support third-party risk management processes and client-facing compliance activities.
• Lead and deliver complex GRC projects in fast-paced environments.
• Share knowledge and best practices to elevate team competencies.
• Continuously improve cybersecurity frameworks and strategies in response to emerging threats and technologies.

Qualifications : Bachelors degree in Engineering, Computer Science, or a related technology discipline.

Mandatory Certification : CISA or ISO 27001 Lead Auditor certification

Preferred Certifications :

Experience :

Desired Skills :

(ref : hirist.tech)