1. Bachelors degree in Computer Science, Information Technology, or related field; relevant certifications (e.g.,ISO 27001 and GDPR) would be an added advantage. 2. Minimum of 2-3 years of experience in a GRC-based compliance role and information security auditing with expertise in ISO 27001, ISO 27701, GDPR, SOC2, HIPAA, PCI-DSS standards. 3. Strong understanding of IT operations and regulatory requirements.