grc specialist

Oxford Management Consultancy

<p><b>Job Title:</b> GRC Specialist</p><p><b>Location:</b> Lahore, Pakistan &mdash; Onsite<br/><b>Employment Type:</b> Full-time</p><p><b>About Us</b></p><p>At <b>AHK Global Solutions</b>, we are committed to building secure, compliant, and well-governed business operations that align with international standards such as <b>ISO 27001, SOC 2, and GDPR</b>.<br/>We&rsquo;re looking for a <b>Governance, Risk &amp; Compliance (GRC) Specialist</b> who is eager to grow in a dynamic, tech-driven environment and support our ongoing compliance and risk management initiatives.</p><p>If you have an analytical mindset, a passion for process improvement, and a keen eye for compliance, this is a great opportunity to develop your career in the global risk and governance domain.</p><p><b>Role Overview</b></p><p>The <b>GRC Specialist</b> will assist in implementing and maintaining the company&rsquo;s governance, risk, and compliance framework. The role involves supporting audits, maintaining documentation, coordinating risk assessments, and ensuring adherence to internal policies and external regulatory requirements.</p><p><b>Key Responsibilities</b></p><ul><li>Assist in the implementation and maintenance of <b>GRC frameworks</b> aligned with ISO, SOC, and regulatory standards.</li><li>Support internal and external <b>audits</b>, ensuring timely documentation and corrective actions.</li><li>Conduct <b>risk assessments</b>, identify gaps, and support mitigation planning.</li><li>Maintain the <b>compliance documentation library</b> (policies, SOPs, controls, evidence records).</li><li>Coordinate with cross-functional teams (IT, HR, Operations) to ensure compliance with data privacy and security standards.</li><li>Monitor regulatory and policy changes and communicate relevant updates to management.</li><li>Support awareness programs and internal training on governance, compliance, and information security.</li><li>Participate in <b>vendor risk assessments</b> and assist in third-party compliance reviews.</li></ul><p><b>Qualifications &amp; Experience</b></p><ul><li><b>Education:</b> Bachelor&rsquo;s degree in <b>Information Security, Computer Science, Business Administration, Risk Management</b>, or a related field.</li><li><b>Experience:</b> 1&ndash;2 years of experience in <b>GRC, Information Security, Risk, or Compliance roles</b>.</li><li><b>Knowledge of:</b></li><li>ISO 27001 / SOC 2 frameworks</li><li>Risk assessment and internal control procedures</li><li>Basic understanding of data protection (GDPR or equivalent)</li><li><b>Skills:</b></li><li>Strong documentation and analytical skills</li><li>Excellent attention to detail and process orientation</li><li>Proficient in MS Office Suite and familiar with GRC tools (ServiceNow, Archer, or others)</li><li>Strong communication and collaboration skills</li></ul><p><b>Preferred Certifications (Optional but Advantageous)</b></p><ul><li>ISO 27001 Lead Implementer / Auditor</li><li>CompTIA Security+</li><li>Certified in Risk and Information Systems Control (CRISC)</li><li>Any introductory GRC or Information Security certification</li></ul><p><b>What We Offer</b></p><ul><li>Competitive salary package based on experience and qualifications.</li><li>Exposure to <b>international compliance standards (ISO, SOC, GDPR)</b>.</li><li>Continuous learning and professional development opportunities.</li><li>Supportive environment that values precision, accountability, and growth.</li><li>Opportunity to collaborate with cross-border teams and global clients.</li></ul><p>Job Type: Full-time</p><p>Work Location: In person</p>

GRC Specialist

Etihad

<p>As part of the Governance, Risk and Compliance team, this role is responsible for Supporting the implementation of the security risk management process, procedures and guidelines - identifying, assessing and controlling risks. They will also manage compliance assessments and supporting activities in audits and certification audits against various standards and track/report compliance implementation. This role is part of the wider Governance, Risk and Compliance team and will require cooperation with corporate compliance functions on the harmonization of security law enforcement activities and conduct IT compliance research and requirement applicability analysis.</p><p>Operate the enterprise-owned tools that support governance, risk and compliance activities and support service providers in delivering contractual security requirements.</p><p>Identify and evaluate IT security risk factors and ensure adequate &amp; effective IT security controls exists that mitigate these risks and meet current and future compliance requirements. Demonstrate knowledge of IT security regulatory requirements like NESA, ISO 27001, PCI DSS, GDPR, ADHICS, etc.</p><p>Provide assurance that IT security risks are effectively identified and addressed in relation to with deployment of new or enhancements in existing information systems and processes. Provide support in coordination activities as required for the IT security component of both internal and external audits.</p><p>Support in the development, review and publishing of content for security awareness theme and conduct security awareness trainings &amp; simulation exercises. Support the vulnerability detection &amp; remediation program with a focus on vulnerability prioritization and remediation with creation of timely reports &amp; dashboards.</p>

SuperNova Solutions Pvt. Ltd.

<p><b>Position Title:</b> GRC Officer / Specialist</p><p>We are seeking a proactive and detail-oriented GRC Officer / Analyst / Specialist to join our Governance, Risk &amp; Compliance (GRC) team. The ideal candidate will play a key role in ensuring that our SAP systems, processes, and IT operations comply with international governance, security, and risk management standards.</p><p><b>Key Responsibilities:</b></p><ul><li>Conduct IT and SAP-related risk assessments, ensuring alignment with corporate governance frameworks</li></ul><ul><li>Support SAP GRC module configuration and compliance monitoring activities</li></ul><ul><li>Maintain and update ISO 27001, SOC 2, and SAP security compliance documentation</li></ul><ul><li>Monitor risk registers and ensure adherence to IT security and data protection policies</li></ul><ul><li>Participate in internal audits, SAP access reviews, and client compliance assessments</li></ul><ul><li>Prepare audit evidence, compliance reports, and risk documentation related to SAP environments</li></ul><ul><li>Collaborate with cross-functional teams (Basis, Security, and Functional Consultants) to ensure SAP compliance</li></ul><p><b>Required Skills &amp; Qualification:</b></p><p>* Education: Bachelor&rsquo;s degree in Computer Science, Information Systems, or Business Administration</p><p>* Experience: 2&ndash;4 years in IT compliance, audit, or risk management (experience with SAP systems or GRC tools preferred)</p><p>* Strong understanding of ISO 27001, SOC 2, GDPR, or NIST frameworks</p><p>* Familiarity with SAP GRC Access Control, Process Control, or Risk Management modules is a plus</p><p>* Excellent communication, documentation, and analytical skills</p><p>* Certifications such as SAP GRC, ISO 27001 Lead Implementer, or CISA are advantageous</p><p><b>Location:</b> Karachi</p><p><b>To apply:</b> careers@global-supernova.com</p><p><b>Subject Line:</b> GRC Officer / Specialist &ndash; Karachi</p><p>Job Type: Full-time</p><p>Pay: Rs100,000.00 - Rs180,000.00 per month</p><p>Work Location: In person</p>

GRC Officer / Specialist

Hewlett Packard Enterprise | HPE

<div>Cybersecurity Issue Management Specialist<br>
<p></p>
This role has been designed as &lsquo;Hybrid&rsquo; with an expectation that you will work on average 2 days per week from an HPE office.<p></p><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p><b>
Who We Are:</b></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>
Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today&rsquo;s complex world. Our culture thrives on finding new and better ways to accelerate what&rsquo;s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.</p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p></p><p><b>
Job Description:</b></p><p></p><div><p><b><br>
About the role</b></p></div><div><p>
The Cybersecurity Issue Management Specialist is responsible for overseeing the identification, tracking, and remediation of cybersecurity issues across the organization. This role ensures that identified risks, audit findings, and control gaps are properly documented, prioritized, and resolved within defined timelines. The specialist will partner with internal stakeholders including Enterprise IT, risk management, compliance, corporate functions and business units to drive accountability, improve security posture, and support regulatory and audit readiness.</p></div><p></p><div><p><b>
About You</b></p></div><div><p>
You will have expertise in cybersecurity processes, control assessments, reviewing and improving audit findings within an enterprise environment. We are looking for someone with great documentation skills, experience with GRC tools to input and track exceptions/issues to closure.</p></div><div><p>
You will work independently and on high-impact projects in fast-paced environments, with advanced expertise across cyber and IT security. Strong communication skills are essential, enabling you to explain complex technical issues to non-technical audiences.</p></div><p></p><div><p><b><br>
You will </b><b>be responsible for</b><b>:</b></p></div><div><div><p><b>
Issue Lifecycle Management</b></p></div><div><ul><li><p>
Maintain and enhance the cybersecurity issue and exception management process, ensuring consistent identification, tracking, and remediation of issues.</p></li></ul></div><div><ul><li><p>
Coordinate with control owners and technical teams to ensure timely remediation and accurate documentation of risk mitigation activities.</p></li></ul></div><div><ul><li><p>
Manage the central issue tracking system in a GRC tool to ensure data integrity and completeness.</p></li></ul></div><p></p><div><p><b>
Risk &amp; Control Oversight</b></p></div><div><ul><li><p>
Partner with various internal teams including Risk, IT Operations, and Compliance teams to assess issue severity, assign ownership, and monitor remediation progress.</p></li></ul></div><div><ul><li><p>
Validate remediation evidence and confirm closure of issues in alignment with HPE enterprise policy and regulatory expectations.</p></li></ul></div><div><ul><li><p>
Support the integration of issue management with other cybersecurity processes such as vulnerability management, incident response, and third-party risk management.</p></li></ul></div><div><ul><li><p>
Should be able to analyze various issues to uncover underlying cybersecurity process shortcomings.</p></li></ul></div><p></p><div><p><b><br>
Reporting &amp; Metrics</b></p></div><div><ul><li><p>
Develop dashboards and key performance indicators (KPIs) to report on issue trends, remediation timelines, and overall risk posture.</p></li></ul></div><div><ul><li><p>
Provide regular updates to senior leadership and audit evidence as required.</p></li></ul></div><div><ul><li><p>
Identify process improvements to increase efficiency and reduce recurring issues.</p></li></ul></div><p></p><div><p><b>
Governance &amp; Compliance</b></p></div><div><ul><li><p>
Ensure issue management practices align with frameworks such as NIST CSF, ISO 27001, SOC 2, and regulatory standards (e.g. GDPR, HIPAA).</p></li></ul></div><div><ul><li><p>
Support audit and regulatory examinations by providing documentation, evidence, and process explanations.</p></li></ul></div><div><ul><li><p>
Work with other compliance functions e.g., Risk, Vulnerability Management, TPRM teams.</p></li></ul></div><p></p><div><p><b><br>
Education &amp; Experience Requirements</b></p></div><div><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent experience desired.</li></ul></div><div><ul><li> 5+ years of experience in cybersecurity, with a focus in GRC area.</li></ul></div><div><ul><li>Proven experience in cybersecurity frameworks, and audits.</li></ul></div><div><ul><li>Strong knowledge of GRC processes including Risk, Policy, Compliance, and Controls</li></ul></div><div><ul><li>Certifications: The following certifications are desired. CISSP, CISM, CRISC, CGEIT, or similar cybersecurity/risk certifications.</li></ul></div></div><p></p><div><div><div><div><div><div><div><p><b>
Additional Skills:</b></p></div></div></div></div></div></div></div>
Accountability, Accountability, Action Planning, Active Learning, Active Listening, Agile Methodology, Bias, Business, Coaching, Creativity, Critical Thinking, Cybersecurity, Data Analysis Management, Data Collection Management (Inactive), Data Controls, Design Thinking, Development Methodologies, Empathy, Follow-Through, Growth Mindset, Implementation Methodologies, Infrastructure Design, Intellectual Curiosity (Inactive), Long Term Planning, Managing Ambiguity {+ 4 more}<p></p><div><div><div><div><div><div><div><p><b>
What We Can Offer You:</b></p></div></div></div></div></div></div></div><p><b>
Health &amp; Wellbeing</b></p><p>
We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.</p><p></p><p><b>
Personal &amp; Professional Development</b></p><p>
We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have &mdash; whether you want to become a knowledge expert in your field or apply your skills to another division.</p><p></p><p><b>
Unconditional Inclusion</b></p><p>
We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.</p><p></p><div><div><div><div><div><div><div><p><b>
Let's Stay Connected:</b></p></div></div></div></div></div></div></div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>
Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE.
</p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p></p>#unitedstates
#cybersecurity<p></p><p><b>
Job:</b></p>
Information Technology<p><b>
Job Level:</b></p>
Expert<p></p><p><b><br>
States with Pay Range Requirement</b></p><p></p><p>
The expected salary/wage range for a U.S.-based hire filling this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. If this is a sales role, then the listed salary range reflects combined base salary and target-level sales compensation pay. If this is a non-sales role, then the listed salary range reflects base salary only. Variable incentives may also be offered. Information about employee benefits offered can be found at https://myhperewards.com/main/new-hire-enrollment.html.</p><p></p>
USD Annual Salary: $105,500.00 - $243,000.00<p></p><div><div><div><div><div><div><div><p>
HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together. Please click here: Equal Employment Opportunity.</p></div></div></div></div></div></div></div><p><b>
Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities.</b></p><p></p><p><br>
HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.</p></div>

Cybersecurity Issue Management Specialist

Accenture

<p><b>Project Role : </b>Security Architect<br>
<b>Project Role Description : </b>Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
<br>
<b>Must have skills : </b>Security Compliance Management<br>
<b>Good to have skills : </b>Security Architecture Design<br>
Minimum <b>5</b> year(s) of experience is required<br>
<b>Educational Qualification : </b>15 years full time education<br>
<br>
Summary: Seeking an experienced Security Architect/ Security Compliance Professional to lead and support the design, implementation, and maintenance of security governance, risk, and compliance (GRC) frameworks. This role ensures that the organization complies with industry standards and regulations such as ISO/IEC 27001, PCIDSS, NIST CSF, SOC 2, TISAX, and others. The candidate will work cross-functionally to manage audits, assess risks, and drive continuous improvement in the security posture of the organization. Your typical day will involve collaborating with various teams to document the implementation of cloud security controls and facilitating the transition to cloud security managed operations, ensuring that all security measures align with organizational standards and compliance requirements. You will also engage in continuous improvement initiatives to enhance the security posture of the organization. Roles &amp; Responsibilities: Expected to perform independently and become an SME or manage a team of GRC professional. Required active participation/contribution in client discussions. Contribute in providing solutions to compliance related complex situations Conduct regular assessments of security framework based or cloud security controls to ensure compliance with established standards. Collaborate with cross-functional teams to identify and mitigate potential security risks. Professional &amp; Technical Skills: Proficient in Information Security, Cyber Security and Governance, Risk, and Compliance (GRC). Has significant exposure to evolving landscape of security compliance requirements Lead and manage security compliance initiatives across the organization. Manage/ Conduct gap assessments and implement controls in alignment with compliance standards (e.g., ISO 27001, PCIDSS, NIST, SOC 2, GDPR and other relevant frameworks). Coordinate and support internal and external security audits, including evidence collection and remediation planning. Partner with business, IT, and legal teams to ensure compliance requirements are understood and implemented. Develop and maintain security policies, procedures, and documentation in line with regulatory needs. Monitor compliance status and prepare reports and metrics for leadership. Educate teams on compliance requirements and drive a culture of security awareness. Relevant certifications : ISO27001LA/LI, ISO3100 or CISA, CISM, CRISC, or equivalent. Additional Information: The candidate should have 6-8 years of relevant experience in Information Security Governance, Risk and Compliance (GRC). A 15 years of full time education is required. This position is based at our Gurgaon/ Bangalore and Other Accenture locations</p>
<br>
15 years full time education

Security Architect

American Express Saudi Arabia

<div>
 <p>
  <strong>
   Company Description
  </strong>
 </p>
 <p>
  American Express Saudi Arabia, established in 1999, is a leading financial company in the Kingdom, renowned for delivering excellence and innovative payment solutions. Our mission is to empower individuals and businesses to progress through advanced payment solutions like Credit Cards, Charge Cards, and other services tailored to fit diverse needs. We lead the Card Business Payment sector, helping customers manage expenses and cash flow effectively. Join us to be part of a team that provides world-class experiences and business success.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   About the Role:&nbsp;
  </strong>
  <span>
   We are seeking a motivated and detail-oriented Cybersecurity GRC Specialist to join our growing cybersecurity team. The ideal candidate will play a key role in developing and delivering cybersecurity awareness and training programs, supporting internal audits, assisting with third-party risk management and contributing to risk management initiatives. This role offers the opportunity to work across various cybersecurity governance, risk and compliance areas while developing your career in the dynamic field of cybersecurity.
  </span>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities include
  </strong>
  <span>
   :
  </span>
 </p>
 <ul>
  <li>
   Assist in identifying, assessing, and reporting cybersecurity risks across the organization.
  </li>
  <li>
   Support the development and maintenance of risk registers, tracking identified risks, and assisting in risk mitigation strategies.
  </li>
  <li>
   Support the planning and execution of internal cybersecurity audits to assess adherence to cybersecurity and regulatory requirements.
  </li>
  <li>
   Assist in preparing audit documentation, audit reports, and follow-up on audit findings with relevant departments.
  </li>
  <li>
   Conduct periodic reviews of third-party cybersecurity posture and assist in monitoring vendor performance in relation to compliance and risk management requirements.
  </li>
  <li>
   Collaborate with the procurement and legal teams to ensure third-party cybersecurity requirements are adequately addressed in vendor contracts and service level agreements (SLAs).
  </li>
  <li>
   Design, develop and implement cybersecurity awareness and training programs in alignment with international standards and regulations (e.g., ISO 27001, NCA, SAMA, PCI DSS).
  </li>
  <li>
   Deliver periodic cybersecurity awareness sessions (online and/or in person). Monitor employee engagement and completion.
  </li>
  <li>
   Track and report on training &amp; phishing metrics to measure effectiveness and to identify risky areas for improvement.
  </li>
  <li>
   Plan and manage phishing simulations and analyze results.
  </li>
  <li>
   Governance of User Violations and Disciplinary Measures
  </li>
  <li>
   Maintain consistent communication about threats, trends, and best practices.
  </li>
  <li>
   Perform other duties as assigned by the GRC Manager.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Necessary Documents to Submit
  </strong>
  <span>
   :
  </span>
 </p>
 <ul>
  <li>
   Resume/CV
  </li>
  <li>
   Bachelor's degree in computer science, information security or a related field.
  </li>
  <li>
   Relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundations).
  </li>
 </ul>
 <p>
  <span>
   &nbsp;
  </span>
 </p>
 <p>
  <strong>
   Why Join AMEX
  </strong>
  <span>
   :
  </span>
 </p>
 <ul>
  <li>
   Working at American Express Saudi Arabia offers a unique opportunity to be part of a global brand with strong local presence. Employees benefit from competitive salaries, continuous training, and professional growth. The company fosters an inclusive and innovative work culture, led by strong leadership and a clear vision. With a focus on digital transformation and social responsibility, AMEX is a place where talent is valued and empowered.
  </li>
 </ul>
 <p>
  <br/>
 </p>
</div>


Cybersecurity GRC Analyst

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><p>Skill-Service Now IRM</p>
<p>
Location-Mumbai /Hyderabad</p>
<p>
Exp- 6 Year to 14 Year</p>
<p>
1. IRM Module Expertise</p>
<p>
2. Platform &amp; Architecture Knowledge</p>
<p>
3. Scripting &amp; Automation</p>
<p>
4. Data &amp; Reporting</p>
<p>
5. Security &amp; Governance</p>
<p>
6. IRM Implementation Skills</p>
</div></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Developer</div>
</div><div><div><b>Job Id</b></div>
<div>378805</div>
</div><div><div><b>Desired Skills</b></div>
<div>ITSM | GRC | Service Now</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF ENGINEERING</div></div></div><div></div>

Service Now IRM

Search 5027+ Grc specialist jobs near you this November. New roles added regularly across leading industries. Apply today.

5027 grc specialist jobs NEAR_ME

GRC Specialist

GRC Specialist

GRC Officer / Specialist

Cybersecurity Issue Management Specialist

Security Architect

Cybersecurity GRC Analyst

Service Now IRM