GRC Analyst
About the role
The GRC Analyst will support the governance, risk, and compliance program by maintaining security policies, tracking and assessing risks, gathering audit evidence, and supporting compliance with frameworks such as SOC 2, ISO 27001, and privacy regulations. The role involves day-to-day compliance operations, evidence collection, internal control testing, risk register maintenance, policy drafting, and supporting security awareness initiatives. This position is suitable for those looking to start a career in cybersecurity, offering mentorship and opportunities to expand into broader risk and audit responsibilities.
Must have
- Bachelor’s degree in Information Security, Information Systems, Computer Science, Business, or a related field (or equivalent practical experience).
- 2+ years of experience in GRC, IT audit, risk management, compliance, or a related security role (internships count).
- Basic understanding of information security concepts (confidentiality, integrity, availability) and common frameworks (ISO 27001, SOC 2, NIST).
- Strong written communication and documentation skills with excellent attention to detail.
- Good organizational skills and ability to manage multiple tasks and deadlines.
- Proficiency with Microsoft Office / Google Workspace, especially spreadsheets and documents.
Technologies
- Cybersecurity
- Google Workspace
- ISO 27001
- Microsoft 365
- NIST
- PCI DSS
- ServiceNow
- SOC 2
Highlights
This is an entry-level opportunity with mentorship and growth potential in cybersecurity. Internships count toward the required experience. The role is suitable for recent graduates or those with up to 2 years of experience.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka