Data Privacy, One Trust

About the Role

• Lead Governance Risk & Compliance (GRC) initiatives across Data Privacy, Data Protection, and Information Security domains.

Key Responsibilities

• Develop and maintain Risk & Control Matrices (RCMs), compliance monitoring rules, Key Risk Indicators (KRIs), and risk scoring methodologies.
• Perform evidence-based compliance testing, control assessments, and policy compliance assurance activities.
• Drive implementation and compliance with ISO 27701, ISO 27001, ISO 37301, PDPL, and related regulatory requirements.
• Integrate data privacy and compliance risks into Enterprise Risk Management (ERM) frameworks.
• Support data risk assessments, monitoring, reporting, remediation tracking, and audit readiness activities.

Requirements & Tech Stack

• GRC
• Data Compliance
• Risk Management
• Data Privacy & Data Protection
• ISO 27701
• ISO 27001
• ISO 37301
• Policy & RCM Development
• Evidence-Based Testing & Compliance Assurance
• KRIs
• Risk Scoring
• Risk Monitoring
• Enterprise Risk Management (ERM)
• Regulatory Compliance & Audit Management

Qualifications

• ISO 27701 Lead Implementer/Auditor
• ISO 27001 Lead Implementer/Auditor
• CRISC
• CGRC
• CISA
• CISSP
• CIPP
• CIPM
• or equivalent Privacy Certifications