Consultant_Governance Risk and Compliance

About the role

As a GRC Analyst supporting the ISO 27001 program, you will help maintain and enhance the organization's Information Security Management System (ISMS).

What you'll do

• Help maintain and enhance the organization's Information Security Management System (ISMS)
• Support the implementation, maintenance, and continual improvement of the ISO 27001 Information Security Management System (ISMS)
• Conduct risk assessments for systems, applications, and third-party vendors in alignment with ISO 27001 and NIST CSF
• Perform control assessments and testing to evaluate the effectiveness of security controls and recommend remediation actions
• Conduct gap assessments and compliance reviews against ISO 27001 requirements and related security frameworks

What you need

• Compliance
• ISO 27001
• Documentation

Good to have

• CISA
• CISSP
• ServiceNow