Information Security GRC Analyst / Specialist

Responsibilities • Support ISO/IEC 27001 ISMS implementation, including gap assessments, control mapping, and certification readiness • Maintain information security risk registers and track risk treatment and remediation activities • Conduct internal audits and support independent security audits across client engagements, identifying and tracking non-conformities • Perform information security risk assessments and gap analyses, applying frameworks such as NIST and CIS Benchmarks alongside ISO/IEC 27001 • Support GDPR/PDPL compliance activities, including contributions to ROPA, DPIA, and DSAR-related processes • Develop and maintain security policies, procedures, and compliance documentation • Coordinate audit evidence and collaborate with cross-functional teams, including developers and external auditors

Requirements • 2–3 years of experience in information security risk, GRC, ISMS, or audit-related roles • Working knowledge of ISO/IEC 27001; exposure to GDPR, PDPL, NIST, or similar frameworks preferred • ISO/IEC 27001 Lead Auditor certification (or in progress) is a plus • Strong written communication and documentation skills • Bachelor's degree in Cyber Security, Information Security, or a related field

Pay: Rs100,000.00 - Rs200,000.00 per month

Work Location: In person