GRC Analyst - Governance | Risk and Compliance Analyst (Information Security Department)

About the role

The GRC Analyst (Governance, Risk, and Compliance Analyst) in the Information Security Department at Cargills Bank is responsible for maintaining Information Security Management System (ISMS) documentation, coordinating policy lifecycle, supporting security risk assessments, and facilitating Risk and Control Self-Assessments (RCSAs). The role involves ensuring accurate tracking of risk registers, assisting with ISMS and related operations, coordinating compliance monitoring, supporting PCI DSS and SWIFT CSP compliance, preparing evidence packs, supporting third-party security due diligence, and periodic asset reviews. The analyst also supports Information Security Committee activities and regulatory engagements. Candidates should have strong knowledge of relevant standards, frameworks, and practical compliance experience within a Sri Lankan banking context.