GRC

Job Description:

• Support implementation and assessment of Information Security and GRC frameworks.

• Perform control assessments, gap assessments and compliance reviews against NIST 800-53, NIST CSF 2.0 and ISO 27001.

• Support ISO 42001 / AI Governance assessments and documentation.

• Assist with HITRUST compliance and control mapping activities.

• Support DORA regulatory compliance, ICT risk management and third-party risk requirements.

• Support DPDP and GDPR privacy compliance activities, including data protection requirements, privacy assessments and documentation.

• Perform risk assessments, control testing and compliance monitoring.

• Prepare and maintain policies, procedures, control matrices, risk registers, evidence and audit documentation.

• Map controls across different frameworks and identify gaps or overlaps.

• Coordinate with IT, Security, Privacy, Legal and business teams for closure of compliance gaps.

• Support internal and external security audits and regulatory assessments.

• Track remediation activities and ensure timely closure of identified gaps.

• Prepare compliance reports, dashboards and management presentations.