Governance Risk And Compliance Professional (Data Protection)
About the role
The Governance Risk and Compliance (Data Protection) Professional at CICRA Consultancies (Pvt) Ltd is responsible for designing, implementing, and maintaining governance, risk, and compliance frameworks with a focus on data protection and information security. The role involves monitoring regulatory developments, assessing organizational data protection risks, ensuring compliance with legal and industry standards, conducting compliance assessments, drafting and updating policies, supporting audits, preparing reports, and coordinating with technical and business teams. The professional will also deliver awareness sessions, advise clients and internal teams on best practices, and contribute to the continuous improvement of CICRA’s service offerings.
Must have
- Strong competence in Compliance Management and Regulatory Compliance to design and maintain effective governance and data protection frameworks.
- Knowledge of Legal Compliance requirements related to data protection, privacy regulations, and information security standards.
- Well-developed Analytical Skills to evaluate risks, interpret regulatory guidance, and translate findings into actionable recommendations.
- Clear and professional Communication skills to collaborate with cross-functional teams, prepare reports, and conduct trainings or briefings.
- Relevant academic background in law, information security, risk management, or a related field.
- Experience in governance, risk, and compliance roles, preferably within cyber security, data protection, or regulated industries.
- Familiarity with frameworks and standards such as ISO 27001, GDPR or similar data protection regulations, and other recognized GRC methodologies.
- Ability to work methodically, manage multiple priorities, and contribute to a high-performance, client-focused environment.
Nice to have
- Professional certifications in information security, privacy, or risk management (e.g., CISM, CISSP, CISA, CIPP, CIPM) are an advantage.
Technologies
- CISM
- CISSP
- ISO 27001
Highlights
This is a full-time, on-site position based in Colombo. Professional certifications in information security, privacy, or risk management (such as CISM, CISSP, CISA, CIPP, CIPM) are considered an advantage.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka