GRC Consultant

Location

Key Responsibilities

• In-depth understanding of governance, risk and compliance requirements across industry verticals
• Developing and refining policies, standards, principles and strategies, and assessing their effectiveness.
• Create / update Risk and Cybersecurity frameworks, standards, governance processes etc.
• Develop / update existing cyber security policies, standards, guidelines and supporting procedural documents as defined by these standards.
• In-depth understanding of industry recognised compliance frameworks especially ISO 27001, NIST, IRAP, PCI-DSS, HIPPA, GDPR, APRA, VPDSF, PSPF, ISM etc.
• Performing security risk and third-party assessments.
• Enhancing cyber awareness with clients and project teams.

Qualification

• Minimum 3 years of relevant work experience
• Preferably having professional certifications such as CISSP, CISM, CISA