We are looking for an experienced Governance, Risk and Compliance (GRC) Specialist who can independently assess organizations against multiple global compliance frameworks and assist customers in becoming audit-ready.
The ideal candidate should have experience with both IT and non-IT organizations.
Responsibilities
Perform compliance assessments
Conduct GAP Analysis
Review organizational policies
Review SOPs
Review HR processes
Review legal agreements
Verify technical controls
Verify operational controls
Prepare risk assessments
Review vendor management
Review asset management
Review business continuity
Conduct internal audits
Support external audits
Prepare evidence requirements
Build compliance roadmaps
Help customers achieve certification
Collaborate with product teams to automate controls
Must Have ExpertiseInformation Security
ISO 27001
ISO 27701
SOC 2
GDPR
DPDP Act
HIPAA
PCI DSS
CIS Controls
NIST CSF
NIST 800-53
TISAX (preferred)
Privacy
GDPR
DPDP
HIPAA
Privacy by Design
Data Classification
Data Retention
Cross-border data transfer
Risk Management
Enterprise Risk Management
Vendor Risk
Third-party Risk
Business Continuity
Incident Response
Risk Register
Control Mapping