GRC Analyst

About This Role

This GRC Analyst role focuses on ensuring compliance with IT general controls and ISO 27001 standards. It involves auditing various security and operational controls within the IT infrastructure.

Responsibilities

• Audit infrastructure security controls
• Audit change management controls
• Audit user access management controls
• Audit HR security controls
• Audit application controls
• Audit incident management controls
• Audit patch management controls
• Audit backup management controls
• Audit BCP controls
• Audit DR controls
• Audit system development controls
• Audit communication security controls
• Audit operational security controls
• Audit information security policies controls
• Audit asset management controls
• Audit access control
• Audit cryptography control
• Audit physical and environmental security controls
• Audit system acquisition and maintenance control
• Audit supplier relationship control
• Audit security incident management controls
• Audit business continuity management controls
• Ensure compliance

Requirements

• GRC / ISO 27001: 2 years (Preferred)