Information Security GRC Specialist (Governance, Risk & Compliance)

iSec Is Hiring | Information Security GRC Specialist (Governance, Risk & Compliance).

Location: Cairo, Egypt
Experience: 1 Year

About the Role
Join our growing cybersecurity team to help implement security governance frameworks, conduct risk assessments, and ensure compliance with security standards and regulations.

Key Responsibilities

• Develop and maintain information security policies, standards, and procedures
• Conduct risk assessments for systems, applications, and third parties; maintain risk registers and treatment plans
• Support security architecture reviews, audits, and compliance assessments
• Support implementation of ISO 27001, NIST, NCA ECC, CBE, and other regulatory requirements
• Track risks, controls, and remediation actions, and prepare management reports
• Support security awareness initiatives

Requirements

• 1 year of experience in GRC (Governance, Risk & Compliance).
• Good knowledge of ISO 27001, NIST, NCA ECC, and ISO 27005
• Understanding of risk assessment methodologies and risk treatment
• Strong documentation, analytical, and communication skills

Nice to Have

• Knowledge of FAIR or GRC platforms (RSA Archer, ServiceNow, MetricStream)
• Certifications such as ISO 27001 Lead Auditor, CRISC, CISM, or CISSP