Risk Manager

Job Description – Information Security Risk Manager (GRC)

Risk Manager- GRC (ISO- & BCP) is responsible for overseeing the implementation, maintenance, and continual improvement of the Information Security Management System (ISMS) in alignment with ISO 27001:2022 standards. This role ensures that the organization’s information security practices meet regulatory requirements, client expectations, and industry best practices, while also mitigating risks to the confidentiality, integrity, and availability of information.

Education  :

- Bachelor’s degree in Information Security, Computer Science, or a related field. A Master’s degree is a plus.

Experience :

- 5+ years of experience in information security management, with a focus on ISO 27001 implementation and compliance.
Proven experience in leading ISMS implementation and managing Information Security compliance audits.

Certifications :

- ISO 27001 Lead Implementer or Lead Auditor certification.
Additional certifications such as CISSP, CISM, or CISA are advantageous.

Skills  :

- In-depth knowledge of ISO 27001:2022 standards and information security best practices.
Strong understanding of risk management and incident management processes.
Excellent communication, documentation, and project management skills.
Ability to work collaboratively with cross-functional teams and influence decision making.
Knowledge and experienced in crisis management best practices.

Experience with Cloud AWS built environments, SaaS provider architecture, and cloud-based disaster recovery methodology.

Key Responsibilities :

- 1. ISMS Implementation & Maintenance.
2. Risk Management.
3. Compliance & Audit Management.
4. Training & Awareness.
5. Incident Management.
6. Continuous Improvement.
7. Stakeholder Communication.
8.Vendor & Third-Party Management.

This role is 60% documentation and process oriented.  Female candidates are preferred for this position.

Interested candidates can apply directly through the job posting or share their CVs at: hin