Grc Consultant- CISA

Role & responsibilities

• Conduct governance, risk, and compliance assessments across IT systems, business processes, and information security controls.
• Perform CICA-related assessments and internal control reviews, based on the applicable organizational framework.
• Identify control gaps, compliance deviations, and potential risks, and recommend corrective actions.
• Assist in conducting risk assessments, control testing, and compliance audits.
• Review policies, procedures, standards, and supporting evidence to assess compliance with defined requirements.
• Support audits aligned with frameworks such as ISO 27001, NIST, and other applicable security and compliance standards.
• Maintain risk registers, compliance trackers, audit evidence, and remediation records.
• Coordinate with internal teams and stakeholders to collect audit evidence and follow up on corrective actions.
• Prepare audit reports, risk assessment reports, compliance documentation, and management updates.
• Track audit observations and remediation activities to ensure timely closure.
• Support internal and external audits and contribute to continuous improvement of governance and compliance processes.

Preferred candidate profile

• Relevant certifications such as CISA, ISO 27001 Lead Auditor/Implementer, CRISC, or equivalent.
• Experience with IT general controls (ITGC), internal audits, and security compliance assessments.
• Familiarity with regulatory requirements and industry-specific compliance frameworks.