Compliance

• Lead the planning, implementation, and management of an Information Security Management System (ISMS) based on ISO 27001.
• Conduct comprehensive gap analyses and information security risk assessments (e.g., using ISO 27005 or similar methodologies).
• Manage and conduct internal audits to ensure readiness for certification.
• Develop, write, and review all necessary ISMS documentation (including policies, procedures, and the Statement of Applicability).
• Act as the primary point of contact for and coordinate internal and external audits.
• Provide expert guidance on security controls and risk mitigation strategies to multiple stakeholders.
• Mentor junior team members and oversee project deliverables.
• Keep up-to-date on the latest trends and regulations in GRC.

Senior GRC Consultant

Lead Technical GRC Analyst

Consultant GRC