Compliance Specialist, IT​/Tech

We are seeking a dynamic and 2 - 4 years' experience GRC Specialist to assist and drive compliance and reporting initiatives.

You will play a desirable role in aligning our organization's compliance reporting structure, carrying risk assessment, ensuring compliance with different standards such as ISO 27001:2022, TISAX, SOC 1, SOC 2, AIMS and SOX and assist in driving impactful awareness programs across all levels.

The ideal candidate should possess excellent verbal and written communication skills, enthusiasm for knowledge acquisition and strong foundation in Governance, Risk, and Compliance, Risk Assessment, ISO 27001:2022, SOC (Service and Organization Controls), NIST 800-53, Privacy (EU-GDPR, DPDPA) and SOX. This role is perfect for someone who is ready to work cross-functionally to drive organization-wide security changes and build a security-first culture.

Roles & Responsibilities :
1. Assist in Implementation of policies, standards, and procedures aligned with global frameworks (e.g., ISO 27001, NIST, GDPR, DPDPA).
2. Conduct risk assessments to identify vulnerabilities and ensure compliance.
3. Collaborate with internal teams to manage compliance requirements.
4. Prepare reports and dashboards for senior leadership.
5. Assist in developing training materials, simulations (e.g., phishing), and e-learning modules.
6. Measure effectiveness of training programs and continuous improvement based on feedback and metrics.
7. Having technical knowledge in managing / supporting IT infrastructure will be an additive advantage.

Preferred Certifications :
ISO 27001:2022 Lead Implementor / Auditor, ITIL v4, CRISC, CISSP, CISA, CISM, or similar.

Understanding of tools such as RSA Archer, Service Now, AWS.

Anyone whose having relevant skills set mentioned above can share an update resume on  [HIDDEN TEXT]  as a subject line   GRC Specialist .