ServiceNow Admin | ServiceNow Developer</h5

br>Employment Type: Full Time, Permanent
Work mode: Onsite

Job description

1. GRC Program Management:

• Develop, implement, and manage the overall IT GRC program.
• Define and enhance policies, procedures, and standards related to information security and compliance.

1. Risk Management:

• Identify, assess, and prioritize IT risks.
• Work closely with stakeholders to develop risk mitigation strategies and ensure their effective implementation.

1. Compliance Management:

• Ensure compliance with relevant laws, regulations, and industry standards.
• Conduct regular compliance assessments and audits.

1. Policy Development:

• Develop and maintain information security policies, ensuring alignment with organizational objectives and industry standards.

1. Training and Awareness:

• Conduct training sessions and awareness programs on GRC best practices.
• Collaborate with stakeholders to ensure a comprehensive understanding of compliance requirements.

1. Incident Response and Investigation:

• Lead and participate in incident response activities.
• Conduct investigations into security incidents and breaches.

1. Continuous Improvement:

• Drive continuous improvement initiatives in the GRC program.
• Stay informed about emerging trends, threats, and regulatory changes affecting the GRC landscape.

Qualifications:

• Bachelor s degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISA, CISSP, or CRISC are highly desirable.
• 7+ years of hands-on experience in IT Governance, Risk Management, and Compliance.
• Proven experience in implementing and managing GRC frameworks, such as NIST, ISO 27001, or COBIT.
• Strong understanding of regulatory requirements (e.g., GDPR, HIPAA, SOX) and industry standards.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.

Demonstrated ability to lead and drive change in a complex and dynamic environment.