GRC Expert

We are seeking a GRC Expert to support the organization's cybersecurity program across governance, risk, compliance, and operational security domains, with a primary focus on ISO/IEC 27001 implementation and ISMS operations. The role involves maintaining security documentation, performing risk assessments, supporting audits, and working closely with SOC and IT teams to ensure security controls related to SIEM, EDR, Firewalls, and DLP are effectively governed and aligned with compliance requirements. The ideal candidate has a practical understanding of both security governance and technical controls and can support security initiatives across multiple domains in a structured and collaborative manner.
Responsibilities:
Support the implementation and ongoing operation of the ISO/IEC 27001 Information Security Management System (ISMS), including policies, procedures, and controls.
Perform information security risk assessments and maintain risk registers, risk treatment plans, and ...