About this role
The team is seeking a Lead Infosec Engineer specializing in Governance, Risk, and Compliance (GRC). In this role, you will be responsible for leading readiness, surveillance, and maintenance activities for various security frameworks including ISO 27001, ISO 27701, NIST CSF, GDPR, DPDPA, and CCSS. You will play a critical role in driving security and privacy awareness programs across the organization.
Key Responsibilities:
- Lead the implementation and maintenance of compliance frameworks.
- Conduct risk assessments and manage internal and external audits.
- Develop and manage security policies and procedures.
- Oversee third-party risk assessments and compliance dashboards.
- Drive security training, phishing simulations, and internal communications to enhance awareness.
- Collaborate with stakeholders to ensure alignment with compliance requirements.
Required Skills & Qualifications:
- Proven experience in information security, with a focus on GRC.
- Strong understanding of ISO 27001, ISO 27701, NIST CSF, GDPR, DPDPA, and CCSS frameworks.
- Excellent analytical and problem-solving skills.
- Ability to communicate complex security concepts to non-technical stakeholders.
- Experience in conducting audits and risk assessments.
Experience:
- Minimum of 5-8 years of relevant experience in information security and compliance.
What we offer:
The team provides a dynamic work environment with opportunities for professional growth and development. You will be part of a team that values innovation and collaboration, working on cutting-edge security initiatives.
Applications are read by our talent team, usually within two working days.
If you look like a fit we will call you, and you will hear from us either way.