Information Security GRC Analyst

Job Summary

A company is looking for an Information Security - GRC Analyst to support its governance, risk, and compliance program.

Key Responsibilities

• Maintain documentation for ISO/IEC 27001 & ISO/IEC 42001 and support continual improvement activities
• Review client MSAs for security requirements and coordinate with Legal and Privacy teams
• Assist with internal and client audit requests, collect evidence, and support risk management workflows

Required Qualifications

• Foundational understanding of information security concepts
• Exposure or interest in ISO/IEC 27001 or AI governance frameworks
• Experience in audits, vendor risk reviews, or privacy compliance is advantageous
• Bachelor's degree in a related field is beneficial but not required with relevant experience
• Must hold or be able to achieve the ISC2 Certified in Cybersecurity (CC) certification within an agreed onboarding period