Experience required : Minimum 2 Years
Qualification: Bachelor's degree in information security, Cybersecurity, Computer Science, or a related field.
Role Summary: Responsible for supporting Lulu Retail's information security governance, risk, and
compliance (GRC) activities by identifying, assessing, monitoring, and reporting information security risks.
The role assists in maintaining security policies, ensuring regulatory compliance, supporting audit
activities, and promoting security awareness across the organization to strengthen the overall security
posture.
Essential Duties & Responsibilities
- Assist in the development, maintenance, review, and communication of information security
policies, standards, procedures, and guidelines.
- Conduct information security risk assessments for systems, applications, cloud services, projects,
and business processes, and track remediation of identified risks.
- Monitor and maintain compliance with applicable regulatory, legal, and industry requirements,
including ISO 27001, NIST, PCI-DSS, GDPR, PDPL, and internal security policies.
- Coordinate and support internal and external audits, security assessments, and regulatory
reviews, including evidence collection, stakeholder coordination, documentation, and
remediation tracking.
- Monitor security governance, risk, and compliance activities and prepare periodic reports,
dashboards, metrics, and management presentations on security posture and compliance status.
- Support information security awareness and training initiatives, including awareness campaigns,
phishing simulations, and monitoring employee participation and effectiveness.
- Collaborate with IT, application, cloud, and security teams to ensure security controls are
implemented, maintained, and aligned with organizational policies, regulatory obligations, and
project requirements.
- Support third-party and vendor security risk assessments, including due diligence reviews,
security evaluations, and follow-up on remediation actions.
Required Experience And Skills
- Bachelor's degree in information security, Cybersecurity, Computer Science, or a related field. A
master's degree is preferred.
- 2 years of experience in information security governance, risk, and compliance.
- Experience supporting ISO 27001, PCI-DSS, NIST, IT audits, or regulatory compliance programs is
preferred.
- Good understanding of information security principles, risk management methodologies, and
security frameworks.
- Professional certifications such as ISO 27001 LA, CISA, Security+ are desirable.
- Strong communication skills with the ability to explain technical concepts to non-technical
stakeholders.
- Strong organizational and time management skills.
- Ability to work independently and collaboratively within a team
