Manager Information Security (Cyber GRC)

Zafin is seeking a Cyber GRC Specialist to develop and maintain governance, risk, and compliance frameworks, conduct cyber risk assessments and audits, and ensure adherence to regulatory requirements and industry standards.

Requirements

• Bachelor’s degree in computer science, Information Security, or a related field
• Strong knowledge of GRC frameworks (e.g., NIST, ISO 27001, GDPR, etc.)
• Minimum 6 years of experience in cybersecurity risk, governance, or compliance
• Experience conducting risk assessments and audits
• Experience working on Azure Environment
• Experience in Vendor Risk Management (Information Security focus)
• Few of the following certifications: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified in the Governance of Enterprise IT (CGEIT), Certified Information Systems Security Professional (CISSP), ISO/IEC 27001 Lead Auditor or equivalent
• Experience using GRC tools for risk and compliance tracking

Benefits

• Competitive salaries
• Annual bonus potential
• Generous paid time off
• Paid volunteering days
• Wellness benefits
• Robust opportunities for professional growth and career advancement