GRC Implementer

abra Professional Services is looking for a GRC Implementer who will be part of the Information Security team.

Responsible for risk management, regulatory and standards compliance, and the implementation of governance processes in the cyber domain.

The role includes working with internal and external stakeholders, supporting information security controls, and participating in projects related to risk management and compliance.

Responsibilities:

• Implement GRC processes across the organization
• Manage and monitor information security controls in accordance with organizational policies
• Support the execution of risk assessments for systems and business processes
• Work in compliance with regulations and standards relevant to the organization
• Assist in preparing materials for internal and external audits
• Collaborate with IT, Information Security, and business units
• Manage vendor and supply chain assessments and address identified findings
• Oversee and supervise subsidiary companies from a GRC perspective
  
  

• Basic familiarity with information security standards (ISO 27001, NIST, PCI-DSS)
• Basic understanding of Governance, Risk Management, and Compliance concepts
• Proficiency in Microsoft Office applications
• Strong teamwork skills and good interpersonal communication
  
  

• Bachelor’s degree in information systems, Computer Science, Information Technology Management, or relevant professional courses in Information Security
• Experience working with GRC systems
• Information security certifications (CISO Fundamentals, ISO Lead Implementer)
• Knowledge of data privacy regulations (GDPR, Privacy Protection Law)
  
  

• Strong analytical skills and process-oriented thinking
• High level of organization and attention to detail
• Ability to learn independently
• Service-oriented mindset and ability to work with multiple stakeholders