IT Governance, Risk, and Compliance (GRC)

2-4 Years

Job Description

Responsibilities

Manage and ensure the comprehensive implementation of corporate compliance in accordance with ISO 27001 standards and Internal SOPs.
Periodically review, update, and maintain SOPs, policies, frameworks, templates, and other supporting compliance documentation.
Prepare audit evidence, conduct rigorous gap analyses, and diligently follow up on audit findings until successful closure.
Support the procurement process from a compliance perspective, including screening and verification of vendor documents, prospective users, and internal mandates.
Coordinate closely with internal users and external vendors regarding document completeness, approval workflows, and the fulfillment of compliance requirements.
Ensure all third-party vendors strictly meet company regulations, information security standards, legality requirements, and corporate procurement procedures.
Prepare and deliver periodic reports concerning corporate compliance status, vendor reviews, SOP updates, and audit progress to management.
Serve as the main PIC for the company's day-to-day IT compliance operational needs.

Requirements

Bachelor's degree in IT/SI
2 to 4 years of proven working experience in IT Compliance, IT Audit, or a similar governance role.
Certified ISO 27001 Auditor.
Have a PCI-DSS certification is a plus.