GRC Lead- Internal Audit & ISO Implementation

Role & responsibilities

The role focuses on Information Security Governance, Risk Management, and Compliance with global standards, especially ISO frameworks. The Lead role will additionally oversee ISMS implementation and cross-functional coordination.

• Lead ISO certification initiatives and surveillance audits
• Hands-on experience in ISO27001 implementation and continuous improvement
• Interpret and apply regulatory and compliance requirements
• Act as ISMS Coordinator, managing end-to-end ISMS activities
• Lead and coordinate cross-functional teams (approx. 16 departments)
• Oversee and work on Vendor Risk Assessment.
• Drive risk treatment plans, audit remediation, and compliance reporting
• Mentor GRC team members and provide strategic guidance

Required Skills:

• Strong understanding of ISO 27001 / ISMS concepts
• Strong experience in Internal Audit
• Experience in risk assessment, control implementation, and audits
• Knowledge of vendor risk management and third-party compliance
• Excellent documentation, communication, and stakeholder management skills
• ISO 27001 Lead Implementer / Lead Auditor certification