Information Security Governance Analyst

Job Purpose:Support the implementation, monitoring, and continuous improvement of information security governance, risk management, and compliance program. This role contributes directly to maintaining ISO 27001:2022 certification, supporting surveillance and external audits, driving KPI/KRI reporting, and enabling the maturity and scalability of GRC processes.Job Responsibilities:▪ Support the development, implementation, and enhancement of the Information Security Management System (ISMS) in line with ISO 27001:2022 .▪ Assist in maintaining GRC policies, procedures, and standards aligned with regulatory and business requirements▪ Gather and report on security-related KPIs and KRIs to monitor control effectiveness and program health▪ Participate in risk assessments, maintain the risk register, and support mitigation tracking▪ Contribute to internal and external audit readiness, including ISO surveillance visits▪ Collaborate with internal stakeholders to promote security awareness and compliance culture▪ Support the implementation and use of GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust)▪ Engage with ongoing projects to support secure development practices, compliance checks, and risk registers▪ Prepare documentation and participate in quarterly ISMS and GRC reporting cycles▪ Operates under the direction of the GRC Manager with a focus on execution and coordination, not strategic program ownershipJob Skills and Abilities:- Basic understanding of ISO 27001and risk frameworks- Awareness of data protection laws- Familiarity with risk management processes- Clear communication and cross-functional collaboration- Analytical and documentation skills- Process-focused, detail-oriented mindset- Ability to coordinate across departments on compliance topics- Ability to manage multiple assignments under supervision- Ability to collect and maintain reliable compliance dataRequirementsQualifications:- Bachelor’s degree in computer science engineering- 2–6 years of experience in information security, risk management, or GRC roles- Exposure to ISO 27001.- Experience with GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust) is a plus- Certifications preferred: ISO/IEC 27001 Foundation or Implementer, CompTIA Security+, CISA, CRISC

Job Purpose:

Support the implementation, monitoring, and continuous improvement of information security governance, risk management, and compliance program. This role contributes directly to maintaining ISO 27001:2022 certification, supporting surveillance and external audits, driving KPI/KRI reporting, and enabling the maturity and scalability of GRC processes.

Job Responsibilities:

▪ Support the development, implementation, and enhancement of the Information Security Management System (ISMS) in line with ISO 27001:2022 .

▪ Assist in maintaining GRC policies, procedures, and standards aligned with regulatory and business requirements

▪ Gather and report on security-related KPIs and KRIs to monitor control effectiveness and program health

▪ Participate in risk assessments, maintain the risk register, and support mitigation tracking

▪ Contribute to internal and external audit readiness, including ISO surveillance visits

▪ Collaborate with internal stakeholders to promote security awareness and compliance culture

▪ Support the implementation and use of GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust)

▪ Engage with ongoing projects to support secure development practices, compliance checks, and risk registers

▪ Prepare documentation and participate in quarterly ISMS and GRC reporting cycles

▪ Operates under the direction of the GRC Manager with a focus on execution and coordination, not strategic program ownership

Job Skills and Abilities:

- Basic understanding of ISO 27001and risk frameworks

- Awareness of data protection laws

- Familiarity with risk management processes

- Clear communication and cross-functional collaboration

- Analytical and documentation skills

- Process-focused, detail-oriented mindset

- Ability to coordinate across departments on compliance topics

- Ability to manage multiple assignments under supervision

- Ability to collect and maintain reliable compliance data

Requirements

Qualifications:

- Bachelor’s degree in computer science engineering

- 2–6 years of experience in information security, risk management, or GRC roles

- Exposure to ISO 27001.

- Experience with GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust) is a plus

- Certifications preferred: ISO/IEC 27001 Foundation or Implementer, CompTIA Security+, CISA, CRISC

SSC HR Solutions is specialized in BPO services with a primary focus on a recruitment and outsourcing services that supports businesses in their recruitment needs. Serving over 80 companies worldwide prominently featured on the Fortune 500. With more than 5,000 successful hires, including 1,000 outsourced employees; SSC proactively seeks, nurtures, and cultivates talent within the corporate realm.Our outsourcing services include but are not limited to: (i) Payroll, (ii) Social Insurance, (iii) Labor Law Consultation, (iv) Medical Insurance, (v) Recruitment Services and (vi) Fully Equipped Integrated Office Spaces.Contact us if you are pursuing prospective talent for your business or are looking to expand your job search.SSC Egypt looks forward to connecting you with your future. If you are interested or have any inquiries, please feel free to reach out to us. - Email Contact: Career@ssc-hr.com- Website: https://ssc-hr.com/

SSC HR Solutions is specialized in BPO services with a primary focus on a recruitment and outsourcing services that supports businesses in their recruitment needs.

Serving over 80 companies worldwide prominently featured on the Fortune 500. With more than 5,000 successful hires, including 1,000 outsourced employees; SSC proactively seeks, nurtures, and cultivates talent within the corporate realm.

Our outsourcing services include but are not limited to: (i) Payroll, (ii) Social Insurance, (iii) Labor Law Consultation, (iv) Medical Insurance, (v) Recruitment Services and (vi) Fully Equipped Integrated Office Spaces.

Contact us if you are pursuing prospective talent for your business or are looking to expand your job search.

SSC Egypt looks forward to connecting you with your future. If you are interested or have any inquiries, please feel free to reach out to us.

- Email Contact: Career@ssc-hr.com

- Website: https://ssc-hr.com/