IT GRC & Security

• Manage ISO 27001 audit preparation and execution, including evidence collection, documentation, and follow-up on audit findings
• Handle IT security governance, risk, and compliance activities, including risk assessments, control reviews, and security gap analysis
• Develop and maintain IT security policies, procedures, standards, and related documentation
• Monitor the implementation and effectiveness of security controls and coordinate remediation of identified risks and vulnerabilities
• Collaborate with technical and business teams to strengthen security practices and ensure compliance with applicable requirements

Requirements:

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or related field
• Minimum 2 years of experience in IT GRC, IT Security, Information Security, or related role
• Hands-on experience with ISO 27001 audits, including audit preparation, evidence collection, and follow-up on findings
• Good understanding of IT security principles, security controls, risk management, and common security frameworks
• Strong analytical, documentation, and communication skills, with the ability to work effectively with both technical and non-technical teams