Business & GRC Lead
About the role
The Business & GRC Lead at ISONEX is responsible for managing governance, risk, and compliance (GRC) engagements and supporting business planning and growth initiatives. The role involves overseeing client GRC programs from initial discovery through remediation and certification, conducting gap analyses, defining controls, and coordinating internal audit activities. The position requires translating regulatory and framework requirements into actionable processes, preparing documentation and reports, advising on standards such as ISO, SOC, HIPAA, and GDPR, and aligning GRC roadmaps with business objectives. The Business & GRC Lead also works closely with clients and internal teams to ensure high-quality service delivery and continuous improvement.
Must have
- Strong analytical skills for interpreting regulations, frameworks, risk assessments, and complex business environments.
- Experience in business planning and business operations, including aligning GRC initiatives with strategic objectives and measurable outcomes.
- Effective communication skills, including clear written documentation, stakeholder presentations, and ability to explain technical and regulatory concepts to non-specialists.
- Customer service orientation, with a focus on building trusted relationships, managing expectations, and delivering responsive, high-quality support to clients.
- Hands-on experience with GRC, compliance, or cybersecurity frameworks (e.g., ISO 27001, SOC 2, HIPAA, GDPR, ISO 42001) and audit readiness projects.
- Demonstrated ability to work independently in a remote environment, manage multiple projects, and prioritize tasks in a fast-paced consultancy setting.
- Bachelor’s degree in business, information security, law, or a related field, or equivalent practical experience; relevant certifications (e.g., ISO 27001 Lead Implementer/Auditor, CISA, CISSP, or similar) are an advantage.
- Comfort with collaborating across technical, legal, and business teams and using modern productivity and project management tools.
Technologies
- CISSP
- Cybersecurity
- ISO 27001
- SOC 2
Highlights
This is a full-time remote position. The company specializes in compliance and cybersecurity consultancy, offering opportunities to work with a variety of frameworks and clients across industries. Relevant certifications are considered an advantage.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka