Information Security GRC Specialist

The role involves maintaining the confidentiality, integrity, and availability of information systems by supporting the development and implementation of security policies, procedures, and standards. The specialist will oversee risk assessments, manage the Information Security Risk Register, and facilitate audits to ensure compliance with frameworks like ISO27001, NIST, and COBIT. A key aspect of the position is promoting security awareness, fostering a security-conscious culture, and advising internal stakeholders on best practices. Candidates should possess experience in risk management methodologies, security frameworks, and creating Security Management Systems. Effective communication skills and the ability to work under pressure are essential for engaging with diverse teams and managing security priorities.