Cybersecurity GRC Specialist

About the Role We are looking for a Cybersecurity Governance, Risk, and Compliance (GRC) Specialist to manage, improve, and oversee our information security management system (ISMS). In this role, you will be the bridge between technical security requirements and business objectives, ensuring our organization remains secure, compliant, and resilient against cyber threats. Key Responsibilities Governance: Maintain and optimize the company's cybersecurity governance framework (ISMS), updates to policies, standards, and compliance processes. Risk Management: Identify, assess, and monitor cyber risks; prioritize and track mitigation strategies, and report findings to key stakeholders. Compliance & Audits: Conduct internal security assessments and collaborate with cross-functional business teams to ensure alignment with cybersecurity policies and regulatory standards. Process Optimization: Align IT procurement and purchasing technology landscapes with industry best practices to improve overall system security and performance. Qualifications & Experience Education: Bachelor’s degree in Computer Science, Information Technology, Business Informatics, or a related field. Experience: 4+ years of dedicated experience in Cybersecurity Governance, ISMS, Risk Management, or Information Security. Technical Knowledge: Deep understanding of industry-standard security frameworks (e.g., ISO 27001, NIST) and governance best practices. Soft Skills: Exceptional communication, stakeholder management, and project management skills with a proven track record of working across IT and business units. What We Expect Candidates Should Have Experience? Hands-on experience with ISO 27001 Experience with security frameworks and regulations such as NIST, NIS2, PCI-DSS , or third-party risk management