Information Security Governance Analyst

Responsibilities

• Support the development, implementation, and enhancement of the Information Security Management System (ISMS) in line with ISO 27001:2022
• Assist in maintaining GRC policies, procedures, and standards aligned with regulatory and business requirements
• Gather and report on security-related KPIs and KRIs to monitor control effectiveness
• Participate in risk assessments and maintain the risk register
• Contribute to internal and external audit readiness, including ISO surveillance visits
• Collaborate with internal stakeholders to promote security awareness and compliance culture
• Support the implementation and use of GRC platforms
• Prepare documentation and participate in quarterly ISMS and GRC reporting cycles

Requirements

• Bachelor’s degree in computer science engineering
• 2–6 years of experience in information security, risk management, or GRC roles
• Exposure to ISO 27001
• Basic understanding of risk frameworks and data protection laws
• Analytical and documentation skills

Preferred Qualifications

• Experience with GRC platforms such as ServiceNow GRC, Archer, or OneTrust
• ISO/IEC 27001 Foundation or Implementer certification
• CompTIA Security+, CISA, or CRISC certifications