Assistant Manager

Infosec GRC Admin

Governance Framework Implementation:
- Support the implementation of governance frameworks, policies, and processes.
- Ensure organizational alignment with governance objectives and business goals.
Policy and Procedure Management:
- Create, update, and maintain corporate policies and procedures related to governance, risk, and compliance.
- Communicate policies to employees and ensure compliance across departments.
Risk Management:
- Identify, assess, and monitor risks to the organization s IT and business operations.
- Assist in developing risk mitigation strategies and plans.
- Maintain a risk register and track resolution of identified risks.
Compliance Monitoring:
- Perform regular compliance audits and assessments.
- Prepare reports on compliance status and findings for management and auditors.
Incident and Issue Management:
- Track and manage compliance or governance-related incidents.
- Work with stakeholders to ensure timely resolution of issues and prevent recurrence.
Training and Awareness:
- Develop and conduct training programs for employees on GRC policies, risk awareness, and compliance requirements.
- Promote a culture of compliance and ethical behavior within the organization.
Audit Support:
- Assist with internal and external audits by providing documentation and evidence of compliance.
- Work with auditors to address findings and implement corrective actions.
Third-Party Risk Management:
- Evaluate and monitor third-party vendors for compliance with security and risk policies.
- Maintain third-party risk assessments and contracts to ensure compliance with organizational standards.
Tool and System Administration:
- Manage GRC tools and software, ensuring accurate data entry and reporting.
- Support the integration of GRC systems with other organizational tools (e. g. , ERP, ITSM).
Collaboration and Stakeholder Engagement:
- Work with cross-functional teams, including IT, legal, HR, and finance, to address GRC needs.
- Act as a liaison between departments to align compliance efforts with business objectives.