Job Summary
GRC
Key Responsibilities
We are seeking a skilled and motivated Governance, Risk, and Compliance (GRC) professional to support the organization\\\'s information security, risk management, and compliance initiatives. The ideal candidate will have hands-on experience with industry frameworks and standards including ISO/IEC 27001, NIST Cybersecurity Framework (CSF), NIST 800-series publications, SOC 1, and SOC 2. The role involves conducting risk assessments, managing compliance programs, supporting audits, and driving continuous improvement of security controls.\\r\\n\\r\\nKey Responsibilities\\r\\nSupport the development, implementation, and maintenance of the organization\\\'s GRC program.\\r\\nConduct information security risk assessments and ensure identified risks are appropriately tracked and remediated.\\r\\nAssist in maintaining compliance with ISO 27001 requirements, including support for certification audits and surveillance audits.\\r\\nEvaluate and assess security controls against NIST frameworks and industry best practices.\\r\\nCoordinate and support SOC 1 and SOC 2 audits, including evidence collection, control testing, and remediation activities.\\r\\nMonitor compliance requirements and recommend improvements to policies, standards, and procedures.\\r\\nPerform gap assessments against regulatory and industry frameworks.\\r\\nTrack remediation activities and collaborate with stakeholders to ensure timely closure of identified findings.\\r\\nSupport third-party/vendor risk assessments and due diligence activities.\\r\\nDevelop compliance reports, risk dashboards, and metrics for management review.\\r\\nFacilitate internal audits and coordinate with external auditors and certification bodies.\\r\\nPromote security awareness and governance best practices across the organization.\\r\\n
Skill Requirements
Bachelor\\\'s degree in Information Security, Computer Science, Information Technology, Risk Management, or a related field.\\r\\n8+ years of experience in Governance, Risk, and Compliance (GRC), Information Security, Audit, or Risk Management.\\r\\nStrong knowledge of:\\r\\nISO/IEC 27001 ISMS requirements and controls\\r\\nNIST Cybersecurity Framework (CSF)\\r\\nNIST SP 800-53 and related NIST standards\\r\\nSOC 1 and SOC 2 audit frameworks\\r\\nRisk assessment methodologies and control testing\\r\\nExperience in developing and maintaining security policies, standards, and procedures.\\r\\nFamiliarity with compliance management and GRC tools.\\r\\nExcellent analytical, documentation, and stakeholder management skills.\\r\\nPreferred Qualifications\\r\\nProfessional certifications such as: CISSP ,CISA ,CRISC ,ISO 27001 Lead Implementer or Lead Auditor\\r\\nExperience with cloud security frameworks (Azure, AWS, Google Cloud).\\r\\nKnowledge of additional compliance frameworks such as PCI DSS, GDPR, HIPAA, or CSA CCM.\\r\\nExperience supporting enterprise-scale security and compliance programs.\\r\\n
Other Requirements
NA