Job Title: Information Security – Control Testing / GRC Analyst

Job Summary

We are looking for a professional with experience in Governance, Risk & Compliance (GRC), Information Security Governance, IT Risk, Internal Audit, or IT Controls. The candidate should have strong hands-on experience in control testing and quality control (QC) of security and IT controls, along with a good understanding of information security principles and risk management concepts.

The ideal candidate should be capable of critically evaluating control design and operating effectiveness to ensure associated risks are appropriately mitigated.

Mandatory Skills

IT Control Testing
Information Security
Governance, Risk & Compliance (GRC)
IT Risk Management
Information Security Governance
Internal Audit
IT Controls
Control Design Assessment
Control Effectiveness Testing
Quality Control (QC)
Risk Assessment
Microsoft Excel
JIRA
Technical Documentation

Key Responsibilities

Perform control testing and quality reviews of information security and IT controls.
Evaluate control design to determine whether identified risks are adequately mitigated.
Assess the operating effectiveness of security and IT controls.
Identify control gaps, weaknesses, and potential risk exposures.
Conduct quality control reviews to ensure testing accuracy and consistency.
Document control testing results, observations, evidence, and recommendations.
Support GRC, IT risk management, and information security governance activities.
Coordinate with stakeholders to collect audit evidence and resolve control-related issues.
Track control deficiencies and remediation activities using JIRA.
Prepare reports and maintain control testing documentation using Microsoft Excel.

Required Qualifications

Experience in GRC, Information Security Governance, IT Risk, Internal Audit, or IT Controls.
Strong hands-on experience in control testing and QC of IT/security controls.
Good understanding of information security principles and risk management.
Ability to evaluate control design and operating effectiveness.
Proficiency in Microsoft Excel and JIRA.
Excellent analytical, communication, and documentation skills.

CyberSecurity Specialist - GRC