Specialist- Information Security GRC

MAIN OBJECTIVE OF ROLE

To support the organization’s cybersecurity governance, risk management, and compliance activities by coordinating and executing Governance, Risk, and Compliance (GRC) processes to ensure alignment with regulatory requirements, industry standards, and internal policies, ultimately strengthening the organization’s security posture.

KEY RESPONSIBILITIES

• Develops, implements, and maintains information security governance frameworks, policies, and procedures.
• Conducts risk assessments and facilitates risk management activities, including identification, evaluation, and mitigation of security risks.
• Supports compliance efforts with relevant regulations and standards such as DESC ISR, ISO 27001, NIST, GDPR, PCI‑DSS, and others.
• Manages and coordinates internal and external audits related to information security and compliance.
• Maintains the organization’s risk register and tracks remediatio...