GRC Manager

Job description

**Roles and Responsibilities :** - Develop and implement GRC frameworks, policies, and procedures to ensure compliance with regulatory requirements. - Conduct risk assessments, identify potential risks, and develop mitigation strategies to minimize threats to the organization's information security posture. - Collaborate with stakeholders to design and implement effective security controls, including access management, incident response planning, and business continuity planning. - Provide training and awareness programs for employees on GRC best practices, policy adherence, and incident reporting. **Job Requirements :** - 8-14 years of experience in Governance Risk Compliance (GRC) or related field such as Information Security or IT Audit. - Strong understanding of ISO standards for Information Security Management System (ISMS). - Proven track record in developing and implementing comprehensive GRC programs that meet industry regulations (e.g., HIPAA, PCI-DSS). - Experience with conducting risk assessments using various methodologies (qualitative/quantitative) to identify potential vulnerabilities.