6d Technologies - Information Security/GRC Analyst (1-4 yrs)

Job Brief :

We are looking for a qualified 2 to 4 years experienced Information Security / GRC Analyst with exposure in Vulnerability Management, Risk Analysis, Compliance & Governance.

- Applicable information security management, governance, and compliance principles, practices, laws, rules and regulations;

- Experience in Information technology systems, ISO 27001 Standards and processes, data processes, and protocols;

- Develop Risk management strategies and working knowledge in any GRC tools or frameworks.

- Information systems auditing, monitoring, controlling, and assessment process;

- Risk assessment and management methodology.

Risk Management :

1. Schedule risk assessments for business units based on the annual calendar

2. Follow up with risk owners for the updates and mitigation plan closure (regular cadence)

3. Supplier risk management

4. Risk Register maintenance

5. Risk Management and analytics

Compliance :

1. Schedule internal audit for business units based on the annual calendar

2. Follow up with NC owners for the updates and mitigation plan closure (regular cadence)

3. Update Risk Register and closure

4. External Audit support

a. Implementation of controls, ITGC

b. Review of controls

c. Collect evidence

d. Yearly surveillance audit preparation