IT Security Governance and Compliance

The IT Risk and Compliance Senior Officer is responsible for supporting, executing, and continuously improving the organization’s IT governance, risk, and compliance (GRC) activities. This role focuses on hands-on implementation, operational oversight, and audit support for ISO/IEC 27001 (internal and external audits), as well as compliance with GDPR / PDP Regulation and NIST requirements. The role ensures that governance and security controls are effectively embedded across project delivery, change management, design reviews, audit processes, and policy lifecycle within a technology-focused organization.

• Strong knowledge of IT Governance, IT Controls, and Information Security Controls
• Hands-on understanding of ISO/IEC 27001 (Clauses & Annex A), GDPR/PDP Regulation, NIST CSF / NIST SP 800
• Experience in control design, control implementation, and control effectiveness assessment
• Skilled in risk assessment, risk register management, and risk treatment tracking
• High attention to detail with strong documentation, evidence management, and audit support skills
• Experience in developing and maintaining policies, standards, procedures, and guidelines
• Ability to translate regulatory and security standards into operational and technical controls
• Familiar with secure-by-design and privacy-by-design principles
• Experience supporting project governance, SDLC controls, and compliance checkpoints
• Exposure to Change Control Board (CCB) and Design Review Board (DRB) processes
• Strong stakeholder communication and coordination across IT, Security, Engineering, PMO, and Legal
• Ability to prepare compliance reports, risk summaries, and management documentation
• Self-motivated, able to work independently with minimal supervision