Information Security Analyst

Job Summary:

We are looking for a driven and detail-oriented GRC specialist to strengthen our client’s governance, risk management, and compliance initiatives. This position focuses on implementing and maintaining effective frameworks, processes, and tools to ensure regulatory compliance, mitigate risk, and uphold strong corporate governance standards.

Key Responsibilities:

Governance:

• Support the development and enforcement of policies, standards, and procedures.
• Assist in aligning IT and business strategies with risk and compliance objectives.
• Participate in audits and governance committees as required.

Risk Management:

• Identify, assess, and monitor operational, IT, and third-party risks.
• Maintain and update risk registers and develop risk mitigation strategies.
• Work with business units to integrate risk management practices into daily operations.

Compliance:

• Monitor regulatory changes and support efforts to meet compliance requirements (e.g., GDPR, HIPAA, SOX, ISO 27001).
• Conduct internal audits, controls testing, and compliance assessments.
• Develop and deliver compliance training programs.

Reporting & Tools:

• Prepare reports and dashboards on risk posture and compliance status for senior management.
• Utilize GRC platforms/tools (e.g., Archer, ServiceNow, LogicGate) to manage data and workflows.
• Maintain documentation and support audit and regulatory inquiries.

Required Qualifications:

• Bachelor’s degree in Business, Information Security, Risk Management, or related field.
• [1–3] years of experience in governance, risk, or compliance.
• Familiarity with GRC frameworks such as ISO 27001, NIST, PCI CP, PCI DSS, PCI TSP, GSMA
• Knowledge of relevant laws and regulations.

Preferred Qualifications:

• Professional certifications such as CISA, CRISC, CISSP, CGEIT, or GRCP.
• Experience using GRC tools/platforms.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently and collaborate across departments.