Key Responsibilities:
1. Assist in preparing evidence for compliance audits related to ISO :2013 and its transition to ISO :2022 by gathering necessary documentation and ensuring accuracy.
2. Support the development of SOPs into a unified format by collaborating with team members to standardize processes across departments.
3. Have an understanding and be able to create a unified controls framework based on different frameworks & standards.
4. Deep knowledge concerning various standards, frameworks, laws, and regulations and be able to reason and understand the requirements of the relevant controls and clauses.
5. Knowledge and at least 3+ years specific hands-on experience on GRC compliance tools in the market.
6. Participate in various audit and compliance requirement activities such as access reviews by evaluating user permissions against the established security policies and helping identify any discrepancies or areas for improvement.
7. Help draft necessary documentation for compliance initiatives by compiling information from various sources and ensuring clarity in communication.
8. Assist in training staff on GRC policies and procedures by contributing to training materials and participating in training sessions as needed.
9. Conduct comprehensive risk assessments to identify, assess, and prioritize risks that could impact business operations, ensuring alignment with GRC frameworks.
10. Collaborate with team members to gather information on current processes and suggest improvements based on industry best practices.
11. Monitor the effectiveness of risk management strategies and make recommendations for improvements.
12. Conduct research on industry trends related to governance, risk management, and compliance to support ongoing improvement efforts within the organization.
Qualifications:
1. Bachelor