GRC Cybersecurity Analyst

Job Title:

Location:

Key Responsibilities

• System Audits & Reviews:
• Conduct internal audits and reviews of key business applications and systems, including but not limited to NetSuite and Salesforce, to ensure compliance with internal policies, industry best practices, and regulatory requirements.
• Identify security gaps, control weaknesses, and non-compliance issues within audited systems.
• Document audit findings, provide recommendations for remediation, and track remediation efforts.
• Cyber Risk Assessments:
• Participate in and support cyber risk assessments across various IT systems, applications, and processes.
• Identify, analyze, and evaluate cybersecurity risks, including technical vulnerabilities and process deficiencies.
• Assist in developing risk treatment plans and recommendations to mitigate identified risks.
• Policy & Procedure Management:
• Contribute to the development, review, and update of cybersecurity policies, standards, guidelines, and procedures.
• Ensure policies align with industry frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Assist in communicating and promoting adherence to cybersecurity policies across the organization.
• Compliance & Reporting:
• Support the organization's adherence to relevant cybersecurity frameworks and regulations (e.g., GDPR, ISO27001, UAE PDPL)
• Prepare reports on audit findings, risk assessment results, and compliance status for management.
• Collaboration & Continuous Improvement:
• Collaborate effectively with IT, legal, internal audit, and business teams to achieve security objectives.
• Stay informed about the latest cybersecurity threats, trends, and best practices.
• Participate in initiatives to continuously improve the GRC program.
  

Qualifications

• Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
  

Experience

• 3+ years of experience in a cybersecurity, IT audit, or GRC-focused role.
• Exposure to auditing or reviewing business applications, with specific experience or familiarity with NetSuite and/or Salesforce highly desirable.
• Experience with conducting basic risk assessments and identifying security controls.
  

Technical Skills

• Basic understanding of cybersecurity principles, frameworks (e.g., NIST CSF, ISO 27001), and compliance requirements.
• Familiarity with common operating systems (Windows, Linux) and network concepts.
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).
  

Soft Skills

• Strong analytical and problem-solving skills with attention to detail.
• Excellent written and verbal communication skills, with the ability to articulate technical concepts to non-technical audiences.
• Ability to work independently and as part of a team in a fast-paced environment.