CyberSecurity Specialist - GRC

Job Title: Information Security – Control Testing / GRC Analyst

Job Summary

We are looking for a professional with experience in Governance, Risk & Compliance (GRC), Information Security Governance, IT Risk, Internal Audit, or IT Controls. The candidate should have strong hands-on experience in control testing and quality control (QC) of security and IT controls, along with a good understanding of information security principles and risk management concepts.

The ideal candidate should be capable of critically evaluating control design and operating effectiveness to ensure associated risks are appropriately mitigated.

Mandatory Skills

• IT Control Testing
• Information Security
• Governance, Risk & Compliance (GRC)
• IT Risk Management
• Information Security Governance
• Internal Audit
• IT Controls
• Control Design Assessment
• Control Effectiveness Testing
• Quality Control (QC)
• Risk Assessment
• Microsoft Excel
• JIRA
• Technical Documentation

Key Responsibilities

1. Perform control testing and quality reviews of information security and IT controls.
2. Evaluate control design to determine whether identified risks are adequately mitigated.
3. Assess the operating effectiveness of security and IT controls.
4. Identify control gaps, weaknesses, and potential risk exposures.
5. Conduct quality control reviews to ensure testing accuracy and consistency.
6. Document control testing results, observations, evidence, and recommendations.
7. Support GRC, IT risk management, and information security governance activities.
8. Coordinate with stakeholders to collect audit evidence and resolve control-related issues.
9. Track control deficiencies and remediation activities using JIRA.
10. Prepare reports and maintain control testing documentation using Microsoft Excel.

Required Qualifications

• Experience in GRC, Information Security Governance, IT Risk, Internal Audit, or IT Controls.
• Strong hands-on experience in control testing and QC of IT/security controls.
• Good understanding of information security principles and risk management.
• Ability to evaluate control design and operating effectiveness.
• Proficiency in Microsoft Excel and JIRA.
• Excellent analytical, communication, and documentation skills.