- Conduct internal assessment, risk assessments and review of IT, OT processes and recommend action for improving IT governance maturity using reference frameworks like ISO 27001/NIST framework/TISAX.
- Ensure compliance with organizational information Security policies and procedures
- Perform regular checks and KRI on security tool.
- Responsible to monitor and manage security related nonconformities.
- Conduct risk assessments to identify, evaluate and prioritize risks related to information security and business operations.
- Support external audits by preparing documentation, coordinating audit activities, and ensuring compliance with cybersecurity policies and standards.
- Work closely with IT, legal and other business stakeholders to integrate IS risk management into business processes ensuring alignment with organizational goals.
- Contribute to the development of IS policies,
procedures and guidelines and assist in delivering training programs to raise awareness of security best practices across the organization.
- Maintain clear and comprehensive documentation of risk assessments , compliance activities , audits, and incident reports to provide transparency to senior leadership and regulatory bodies.
Mandatory
Skill
- Solid analytical and problem-solving skills.
- Excellent communication and interpersonal skills
- Ability to influence and work collaboratively across departments
- Proficiency in GRC tools and software
Requirements
- Minimum 2+ years of hands-on experience in Governance, Risk and Compliance roles. Good understanding of IS principles, controls and risk management methodologies, compliance, and audit.