GRC Analyst

• Support in the implementation and maintenance of Governance, Risk, and Compliance frameworks and policies.
• Conduct and document risk assessments; track and monitor mitigation activities.
• Ensure compliance with standards such as ISO 27001, NIST, HIPAA, GDPR, or other applicable local regulations.
• Maintain and update policies, procedures, and compliance documentation.
• Coordinate with internal teams to ensure audit readiness and support external/internal audits.
• Stay informed of evolving regulations, standards, and best practices related to GRC.

• Bachelor’s degree in Computer Science, Information Security, Risk Management, or related field.
• 1–3 years of experience in GRC, information security, compliance, or related roles.
• Familiarity with frameworks such as ISO 27001, NIST, HIPAA, GDPR, and risk management methodologies.
• Strong analytical and documentation skills.
• Relevant certifications (preferred): ISO 27001 Lead Implementer/Lead Auditor, CISA, CRISC, or similar.

Tools / Skills