Senior Information Security Engineer - GRC
About the role
The Senior Information Security Engineer - GRC at Sri Lanka CERT will support the implementation of national-level programmes on information and cybersecurity, focusing on governance, risk management, compliance, policies, standards, and related GRC activities. Key responsibilities include developing and implementing security policies, performing risk assessments, managing compliance, overseeing audits, delivering training, preparing reports, and providing guidance to junior team members. The role requires a relevant degree, a verifiable cybersecurity certification, and at least five years of industry experience, including two years in a GRC or supervisory role. The position offers a chance to contribute to national cybersecurity efforts and includes travel allowance.
Must have
- Bachelor’s Degree (SLQF 5 or 6) in Information Security, Cyber-Security, Computer Science, Information Technology or any other field relevant to the post, obtained from a local or foreign university, recognized by the University Grant Commission (UGC) in Sri Lanka
- Should hold a verifiable Cyber-security Certification, preferably CSSLP, CEH, OSCP or any other verifiable relevant certification relevant to the post, recognized by Sri Lanka CERT. Such certifications must be maintained in active status.
- Five (05) years or above industry experience in the field of information and Cyber security or relevant out of which 02 years should be in a GRC or a similar role at supervisory level within a reputed private sector cyber-security service provider, public corporation, statutory board, fully government owned company, or a reputed commercial establishment, after obtaining the first Degree.
- Deep understanding of GRC principles, practices, and frameworks.
- Proven experience in conducting risk assessments and managing compliance programs.
- Strong leadership, analytical, and communication skills.
- Skills in Presentations
- Teamwork skills
- Age should be not less than 30 years and not more than 45 years.
Technologies
- CEH
- Cybersecurity
- OSCP
Highlights
Applicants must be between 30 and 45 years old. Applications should be sent by email to careers@cert.gov.lk with the subject 'Senior IS Engineer – GRC' by 16th October 2026, including a recent photo and two non-related referees. Only shortlisted candidates will be notified. Salary is based on industry standards and includes travel allowance.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka