GRC Consultant

Job Summary

The GRC professional will support the organization in establishing, maintaining, and improving governance frameworks, risk management processes, and compliance programs. The role involves policy management, risk assessments, audits, regulatory compliance, and coordination with internal and external stakeholders.

Key Responsibilities

Governance

• Develop, review, and maintain information security and IT governance policies, standards, procedures, and guidelines
• Ensure alignment of policies with business objectives and regulatory requirements
• Support corporate governance initiatives and internal control frameworks
  
  

Risk Management

• Conduct IT and information security risk assessments and document risk registers
• Identify, analyze, and evaluate operational, IT, and compliance risks
• Support risk treatment plans and track remediation activities