IT GRC

Build and maintain IT policies, standards, and governance processes Conduct IT risk assessments and maintain the risk register Identify, evaluate, and track remediation of technology risks Drive compliance initiatives (ISO 27001, SOC2, GDPR, PDPA, etc.) and some audit relate to regulation. Prepare documentation, evidence, and coordination for internal/external audits Work with security and engineering teams to validate and improve controls Support security awareness and incident response process