GRC Analyst

About the role

The company provides GRC services and expects this role to help establish, implement, and maintain governance, risk management, and compliance practices. The role focuses on risk assessments, control implementation, and supporting audits across multiple standards including ISO 27001, ISO 42001, and SOC 2.

What you'll do

• Support implementation, governance, evidence management and ongoing compliance for ISO/IEC 42001
• Support SOC 2 readiness, including control implementation, evidence collection, gap tracking and remediation
• Conduct risk assessments and maintain risk and compliance records
• Perform periodic control testing and compliance monitoring
• Coordinate evidence collection for audits and track findings through remediation
• Collaborate with Engineering, Product, Legal and other stakeholders to maintain controls

What they're looking for

• Bachelor's degree in Cybersecurity, Computer Science, IT, Risk Management or related field
• 2-5 years in governance, risk management, information security, IT audit or compliance
• Understanding of information security management systems, risk assessment, control implementation and audits
• Familiarity with ISO/IEC 27001, ISO/IEC 42001, SOC 2 and data protection regulations
• Experience maintaining risk registers, compliance documentation, audit evidence and corrective action trackers
• Strong analytical, documentation, communication and stakeholder management skills

For applicants in Nigeria

• The listing states location as Nigeria and eligibility in Nigeria, so applicants in Nigeria may be considered
• The listing does not specify timezone expectations
• The listing does not state contractor vs employee arrangement
• The listing does not state pay currency or range