Information Security GRC

Provide guidance and share best practices for design and implementation of the GRC platforms. Ensure partnership with different teams for Proactive Compliance Risk Management - identification, assessment, risk action planning. Implements local and international security laws and regulations. Implements security controls, risk assessment framework, and programs that align to regulatory requirements, standards. Evaluates risks and develops security standards, procedures, and controls to manage risks. Implements GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifacts. Documents and reports control failures and gaps to stakeholders.

• Provides remediation guidance and prepares management reports to track remediation activities.

Requirements Bachelor's degree in Computer Science or equivalent +2 Years of experience in relevant scope. Strong knowledge in user awareness programs Strong knowledge of program development Strong knowledge of compliance and regulatory standards CBE standards NIST standards ISO Standards PCI-DSS