Consultant

Key Responsibilities:

1. Governance Support:
• Assist in maintaining and updating information security policies, standards, and procedures.
• Collaborate with teams to ensure alignment with organizational goals and regulatory requirements.
2. Risk Management:
• Conduct risk assessments to identify and document potential security risks.
• Track remediation activities and support stakeholders in implementing mitigation strategies.
3. Compliance Monitoring:
• Assist in compliance audits for standards like ISO 27001, PCI DSS, or GDPR.
• Maintain records and evidence to demonstrate adherence to regulatory and contractual obligations.
4. Awareness and Training:
• Support the delivery of security awareness programs to educate employees on GRC practices.
• Develop training materials under supervision and assist with regular updates.
5. Reporting and Documentation:
• Prepare reports on risk, compliance status, and security metrics.
• Maintain documentation for GRC processes and procedures.

Qualifications:

• Bachelors degree in Information Technology, Cybersecurity, or a related field.
• 2–3 years of experience in information security, risk management, or compliance roles.
• Knowledge of frameworks such as ISO 27001, NIST CSF, or COBIT.
• Basic understanding of regulatory requirements (e.g., GDPR, HIPAA).

Key Skills:

• Strong analytical and problem-solving skills.
• Basic understanding of IT and security controls.
• Effective written and verbal communication.
• Ability to collaborate with cross-functional teams.

Certifications (Preferred):

• ISO 27001 Lead Implementer or Internal Auditor.
• CompTIA Security+ or similar entry-level certifications.
• ITIL Foundation or equivalent.