Governance, Risk, and Compliance (GRC) Specialist

About the role

The Governance, Risk, and Compliance (GRC) Specialist is responsible for managing information security audits, compliance programs, and cybersecurity governance across the organization. You will ensure adherence to security standards, regulatory requirements, and internal policies while strengthening the overall security posture.

Key responsibilities

• Develop and maintain comprehensive IT security audit and compliance programs.
• Plan, coordinate, and execute security audit activities, defining scope, objectives, methodologies, and work plans.
• Conduct security compliance audits for systems, applications, infrastructure, and cloud environments.
• Maintain audit schedules, documentation, evidence collection, and reporting processes.
• Monitor cybersecurity maturity, compliance posture, and build controls matrices aligned with multiple frameworks.
• Identify security risks, vulnerabilities, and compliance gaps; recommend and coordinate remediation.
• Oversee compliance and security controls for cloud security, IAM, PAM, DLP, and enterprise collaboration platforms.
• Prepare audit and compliance reports, communicate findings to leadership, and track remediation progress.

Required profile

• Proven experience in IT security audit, compliance, and risk management.
• Familiarity with regulatory requirements and security standards.
• Ability to work with cross‑functional teams and external auditors.

Required skills

• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Data Loss Prevention (DLP)
• Cloud security
• Vulnerability assessment