We are seeking a Cyber Strategy, Risk, Governance & Compliance professional with 3–4 years of experience in cybersecurity risk management, IT governance, controls assessment, compliance, and audit support. The candidate will work closely with business and technology stakeholders to assess cybersecurity risks, evaluate controls, support regulatory compliance initiatives, and strengthen governance frameworks across the organization.
Key Responsibilities
Cyber Risk & Controls Assessment
Conduct cybersecurity, IT risk, and control assessments aligned with industry frameworks such as ISO 27001, NIST CSF, COBIT, CIS Controls, and regulatory requirements.
Perform risk assessments to identify control gaps, security weaknesses, and compliance deficiencies across technology environments.
Evaluate the design and operating effectiveness of security controls through Test of Design (ToD) and Test of Effectiveness (ToE) reviews.
Facilitate control walkthroughs with process and control owners to understand control implementation and maturity.
Governance, Risk & Compliance (GRC)
Support the implementation and enhancement of Cybersecurity Governance, Risk, and Compliance (GRC) programs.
Develop, review, and maintain information security policies, standards, procedures, guidelines, and governance documentation.
Assist in establishing risk management processes, control frameworks, risk registers, and governance reporting mechanisms.
Support compliance assessments against organizational policies, industry standards, and regulatory requirements.
Audit & Compliance Support
Support internal and external audits by coordinating evidence collection, control validation, and auditor interactions.
Track audit observations, risk findings, and remediation plans to ensure timely closure.
Conduct compliance reviews and control gap assessments, providing practical recommendations for risk mitigation and control improvement.
Assist organizations in preparing for certification and regulatory compliance initiatives.
Risk Monitoring & Remediation
Collaborate with business and technology teams to define corrective action plans for identified findings and risks.
Monitor remediation progress, validate closure evidence, and report risk status to stakeholders.
Support enterprise risk management activities through risk identification, assessment, reporting, and tracking.
Program Governance & PMO Support
Provide governance and PMO support for cybersecurity transformation and compliance programs.
Maintain RAID logs (Risks, Assumptions, Issues, and Dependencies) and track project risks and actions.
Prepare management reports, dashboards, status updates, and steering committee presentations.
Coordinate stakeholder communications and governance meetings to ensure effective program delivery.
Required Qualifications
Bachelor's degree in Engineering, Computer Science, Information Technology, Cybersecurity, or related field.
3–4 years of experience in Cyber Risk, IT Risk Management, ITGC, Internal Audit, Cybersecurity Governance, or Compliance roles.
Strong understanding of cybersecurity frameworks and standards such as ISO 27001, NIST CSF, COBIT, CIS Controls, SOC 2, and ITGC concepts.
Experience performing control assessments, risk assessments, compliance reviews, and audit support activities.
Knowledge of risk registers, issue management, remediation tracking, and governance reporting.
Excellent stakeholder management, documentation, analytical, and communication skills.
Preferred Certifications
ISO 27001 Lead Implementer/Lead Auditor
CISA
CRISC
CGEIT
CISSP (preferred)
Security+, CEH, or equivalent certifications
Key Skills
Cyber Risk Management
IT Governance & Compliance
Information Security Management Systems (ISMS)
Regulatory & Compliance Assessments
ITGC Reviews
Control Testing (ToD/ToE)
Risk Assessment & Gap Analysis
Audit Management
Policy & Standards Development
PMO Governance & Reporting
Stakeholder Management
Project Coordination
This role is ideal for professionals looking to build expertise across Cyber Strategy, Risk, Governance, Compliance, Audit, and Security Transformation initiatives.
Responsibilities
We are seeking a Cyber Strategy, Risk, Governance & Compliance professional with 3–4 years of experience in cybersecurity risk management, IT governance, controls assessment, compliance, and audit support. The candidate will work closely with business and technology stakeholders to assess cybersecurity risks, evaluate controls, support regulatory compliance initiatives, and strengthen governance frameworks across the organization.
Key Responsibilities
Cyber Risk & Controls Assessment
Conduct cybersecurity, IT risk, and control assessments aligned with industry frameworks such as ISO 27001, NIST CSF, COBIT, CIS Controls, and regulatory requirements.
Perform risk assessments to identify control gaps, security weaknesses, and compliance deficiencies across technology environments.
Evaluate the design and operating effectiveness of security controls through Test of Design (ToD) and Test of Effectiveness (ToE) reviews.
Facilitate control walkthroughs with process and control owners to understand control implementation and maturity.
Governance, Risk & Compliance (GRC)
Support the implementation and enhancement of Cybersecurity Governance, Risk, and Compliance (GRC) programs.
Develop, review, and maintain information security policies, standards, procedures, guidelines, and governance documentation.
Assist in establishing risk management processes, control frameworks, risk registers, and governance reporting mechanisms.
Support compliance assessments against organizational policies, industry standards, and regulatory requirements.
Audit & Compliance Support
Support internal and external audits by coordinating evidence collection, control validation, and auditor interactions.
Track audit observations, risk findings, and remediation plans to ensure timely closure.
Conduct compliance reviews and control gap assessments, providing practical recommendations for risk mitigation and control improvement.
Assist organizations in preparing for certification and regulatory compliance initiatives.
Risk Monitoring & Remediation
Collaborate with business and technology teams to define corrective action plans for identified findings and risks.
Monitor remediation progress, validate closure evidence, and report risk status to stakeholders.
Support enterprise risk management activities through risk identification, assessment, reporting, and tracking.
Program Governance & PMO Support
Provide governance and PMO support for cybersecurity transformation and compliance programs.
Maintain RAID logs (Risks, Assumptions, Issues, and Dependencies) and track project risks and actions.
Prepare management reports, dashboards, status updates, and steering committee presentations.
Coordinate stakeholder communications and governance meetings to ensure effective program delivery.
Required Qualifications
Bachelor's degree in Engineering, Computer Science, Information Technology, Cybersecurity, or related field.
3–4 years of experience in Cyber Risk, IT Risk Management, ITGC, Internal Audit, Cybersecurity Governance, or Compliance roles.
Strong understanding of cybersecurity frameworks and standards such as ISO 27001, NIST CSF, COBIT, CIS Controls, SOC 2, and ITGC concepts.
Experience performing control assessments, risk assessments, compliance reviews, and audit support activities.
Knowledge of risk registers, issue management, remediation tracking, and governance reporting.
Excellent stakeholder management, documentation, analytical, and communication skills.
Preferred Certifications
ISO 27001 Lead Implementer/Lead Auditor
CISA
CRISC
CGEIT
CISSP (preferred)
Security+, CEH, or equivalent certifications
Key Skills
Cyber Risk Management
IT Governance & Compliance
Information Security Management Systems (ISMS)
Regulatory & Compliance Assessments
ITGC Reviews
Control Testing (ToD/ToE)
Risk Assessment & Gap Analysis
Audit Management
Policy & Standards Development
PMO Governance & Reporting
Stakeholder Management
Project Coordination
This role is ideal for professionals looking to build expertise across Cyber Strategy, Risk, Governance, Compliance, Audit, and Security Transformation initiatives.
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
Cyber Security - IAM Professional Services
Role Descriptions: Key ResponsibilitiesMaintain enterprise IAM solutions and access control frameworks. Manage application integrations with IAM platforms using SSO| MFA| LDAP| SAML| OAuth| OIDC| SCIM| and API-based integrations. Oversee user identity lifecycle management including Joiner-Mover-Leaver (JML) processes. Drive implementation and operational management of Privileged Access Management (PAM) solutions. Manage Identity Governance Administration (IGA) processes including RBAC| access provisioning| segregation of duties (SoD)| and policy enforcement. Conduct and coordinate periodic User Access Reviews (UAR) and access certification campaigns. Ensure compliance with internal security policies| regulatory requirements| and audit controls. Support internal and external audits by providing evidence| documentation| control validation| and audit readiness activities. Monitor IAM operations| access anomalies| privileged account usage| and security incidents related to identity systems. Collaborate with application owners| infrastructure teams| and vendors for onboarding and remediation activities. Participate in security assessments| risk reviews| and compliance initiatives related to identity security.
Essential Skills: Required Skills Experience8 years of experience in Identity and Access Management (IAM)| Identity Governance (IGA)| or Privileged Access Management (PAM). Proven experience leading IAM teams and managing enterprise IAM operations. Strong hands-on experience with IAMPAM solutions such as CyberArk| SailPoint| Saviynt| Okta| Azure ADEntra ID| ForgeRock| Ping Identity| BeyondTrust| Delinea| or similar platforms. Experience integrating enterprise applications with IAM solutions using SAML| OAuth2| OIDC| LDAP| SCIM| REST APIs| and MFA technologies. Strong understanding of identity lifecycle management| RBAC| ABAC| least privilege| and Zero Trust principles. Experience managing User Access Reviews (UAR)| access certifications| and audit remediation activities. Good understanding of security frameworks and compliance standards such as ISO 27001| NIST| SOX| GDPR| SOC2| or similar. Experience with scriptingautomation using PowerShell| Python| or APIs is preferred.
Responsibilities
Role Descriptions: Key ResponsibilitiesMaintain enterprise IAM solutions and access control frameworks. Manage application integrations with IAM platforms using SSO| MFA| LDAP| SAML| OAuth| OIDC| SCIM| and API-based integrations. Oversee user identity lifecycle management including Joiner-Mover-Leaver (JML) processes. Drive implementation and operational management of Privileged Access Management (PAM) solutions. Manage Identity Governance Administration (IGA) processes including RBAC| access provisioning| segregation of duties (SoD)| and policy enforcement. Conduct and coordinate periodic User Access Reviews (UAR) and access certification campaigns. Ensure compliance with internal security policies| regulatory requirements| and audit controls. Support internal and external audits by providing evidence| documentation| control validation| and audit readiness activities. Monitor IAM operations| access anomalies| privileged account usage| and security incidents related to identity systems. Collaborate with application owners| infrastructure teams| and vendors for onboarding and remediation activities. Participate in security assessments| risk reviews| and compliance initiatives related to identity security.
Essential Skills: Required Skills Experience8 years of experience in Identity and Access Management (IAM)| Identity Governance (IGA)| or Privileged Access Management (PAM). Proven experience leading IAM teams and managing enterprise IAM operations. Strong hands-on experience with IAMPAM solutions such as CyberArk| SailPoint| Saviynt| Okta| Azure ADEntra ID| ForgeRock| Ping Identity| BeyondTrust| Delinea| or similar platforms. Experience integrating enterprise applications with IAM solutions using SAML| OAuth2| OIDC| LDAP| SCIM| REST APIs| and MFA technologies. Strong understanding of identity lifecycle management| RBAC| ABAC| least privilege| and Zero Trust principles. Experience managing User Access Reviews (UAR)| access certifications| and audit remediation activities. Good understanding of security frameworks and compliance standards such as ISO 27001| NIST| SOX| GDPR| SOC2| or similar. Experience with scriptingautomation using PowerShell| Python| or APIs is preferred.
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
