GRC Implementer

DESCRIPTION

abra Professional Services is looking for a GRC Implementer who will be part of the Information Security team.

Responsible for risk management, regulatory and standards compliance, and the implementation of governance processes in the cyber domain.

The role includes working with internal and external stakeholders, supporting information security controls, and participating in projects related to risk management and compliance.

Responsibilities:

Implement GRC processes across the organization
Manage and monitor information security controls in accordance with organizational policies
Support the execution of risk assessments for systems and business processes
Work in compliance with regulations and standards relevant to the organization
Assist in preparing materials for internal and external audits
Collaborate with IT, Information Security, and business units
Manage vendor and supply chain assessments and address identified findings
Oversee and supervise subsidiary companies from a GRC perspective

REQUIREMENTS
Basic familiarity with information security standards (ISO 27001, NIST, PCI-DSS)
Basic understanding of Governance, Risk Management, and Compliance concepts
Proficiency in Microsoft Office applications
Strong teamwork skills and good interpersonal communication

Advantages:

Bachelor’s degree in information systems, Computer Science, Information Technology Management, or relevant professional courses in Information Security
Experience working with GRC systems
Information security certifications (CISO Fundamentals, ISO Lead Implementer)
Knowledge of data privacy regulations (GDPR, Privacy Protection Law)

Required Skills:

Strong analytical skills and process-oriented thinking
High level of organization and attention to detail
Ability to learn independently
Service-oriented mindset and ability to work with multiple stakeholders