Information Security Governance, Risk and Compliance (GRC) - AM

About the Role:

We are seeking a driven and detail oriented GRC Analyst to join our team and play a vital role in safeguarding our organization's information assets and ensuring compliance with relevant regulations and industry standards. You will be responsible for developing, implementing, and maintaining a comprehensive GRC program that effectively manages risks, promotes good governance practices, and ensures legal and regulatory adherence on IT and cyber security.

1. Conduct risk assessments to identify, analyses, and prioritize potential threats to the organization's information security, financial stability, and operational continuity.
2. Develop and implement risk management strategies to mitigate identified risks, including controls, monitoring procedures, and contingency plans.
3. Stay up to date on relevant laws, regulations, and industry standards and translate them into actionable policies and procedures.
4. Manage the GRC program framework, including maintaining a central repository of policies, procedures, and risk assessments.
5. Conduct and participate in compliance audits and assessments to identify and address any gaps in our compliance posture.
6. Collaborate with various departments across the organization, such as IT, legal, and finance, to ensure alignment between business objectives, risk management efforts, and compliance initiatives.
7. Develop and deliver training programs to raise awareness of information security policies, procedures, and best practices among employees.
8. Track and report on GRC activities, including risk metrics, audit results, and compliance status, to management.
9. Utilize GRC tools and technologies to automate workflows, streamline processes, and improve program effectiveness.
10. Conduct cyber security, network security and SOC efficacy assessment
11. Implement Information Security governance across the organization, and to the business partners.

Preferred Qualifications and expertise

1. Minimum of 3 years of experience in a GRC-related role, such as risk management, compliance, or information security.
2. Strong understanding of GRC principles, methodologies, and frameworks (e.g., COBIT, COSO, ISO 27001).
3. Experience with conducting risk assessments and developing risk management plans.
4. Proven ability to research, analyze, and interpret complex regulations and standards.
5. Excellent communication, collaboration, and interpersonal skills to work effectively with stakeholders across different departments.
6. Strong analytical and problem-solving skills.
7. Proficiency in use of GRC tools
8. Certifications such as CISA/CISM/CRISC/ CGEIT/CISSP
9. Experience with project management methodologies / GRC tools
10. Experience with data analysis and reporting tools.

Upman Placements is a firm of Researcher & Recruitment Specialists. The company started life in 2002 in India as a recruitment specialist firm. The company has built a stellar reputation for high ethical standards, a specialized focus and unparalleled service. Emerged As one of the only truly global specialized staffing firms focusing exclusively in professional positions for our clients spread across more than 20 countries with a sizable presence across industry levels. With footprints in competitive markets of India, Europe, United Kingdom, Middle East, Singapore, Malaysia, Philippines, Indonesia, Brunei and East & Central African countries.