Shared Services – Information Security, GRC & Technology Compliance

Job Description:

Job Summary:

We are looking for a professional to support Information Security, Cybersecurity Governance, Risk Management, and Technology Compliance activities. The role involves monitoring security controls, maintaining risk and compliance registers, coordinating audit evidence, tracking remediation actions, supporting Data Loss Prevention (DLP) initiatives, and preparing security governance reports.

The candidate will work closely with Technology, Risk, Compliance, Internal Audit, and external vendors to strengthen information security controls and ensure adherence to applicable policies, standards, and regulatory requirements.

Key Responsibilities:

• Support the implementation, operation, and review of information security and cybersecurity controls.
• Maintain IT risk registers, control documentation, compliance records, audit trackers, and remediation logs.
• Coordinate the collection, validation, and maintenance of audit evidence and regulatory documentation.
• Support Data Loss Prevention (DLP), data protection, and information security initiatives.
• Track security vulnerabilities, audit observations, control gaps, and risk remediation activities until closure.
• Assist with security incident triage, evidence preservation, containment coordination, and post-incident follow-up.
• Coordinate with Technology, Risk, Compliance, Internal Audit, and external vendors on security and compliance requirements.
• Prepare security MIS, risk reports, compliance updates, and governance dashboards.
• Maintain information security policies, standards, procedures, and control documentation.
• Support security awareness initiatives and periodic control testing.
• Escalate significant security incidents, high-risk control gaps, and overdue remediation actions.

Key Skills:

• Information Security
• Cybersecurity Governance, Risk & Compliance (GRC)
• IT Risk Management
• Technology Risk & Compliance
• Information Security Controls
• IT Audit and Audit Evidence Management
• Risk Assessment and Remediation Tracking
• Data Loss Prevention (DLP)
• Security Incident Management Support
• Regulatory Compliance
• Security Policies and Documentation
• MIS Reporting and Stakeholder Coordination