GRC Specialist

Key Responsibilities:Assist in the development and maintenance of information security policies, procedures, and standards.Support risk assessment and risk treatment activities across business units.Help track and monitor compliance with frameworks such as ISO 27001, NIST, GDPR, or other relevant regulations.Maintain documentation and evidence for internal and external audits.Participate in security awareness and training initiatives.Monitor and report on control effectiveness and risk mitigation progress.Collaborate with IT, legal, and business teams to address compliance gaps.🎓 Requirements:Bachelor’s degree in Information Security, Computer Science, Business, or a related field.1–2 years of experience in GRC, information security, or audit.Basic understanding of risk management, information security controls, and compliance frameworks.Strong attention to detail, analytical thinking, and organizational skills.Good communication and reporting skills.Familiarity with GRC tools or platforms is a plus.