GRC Specialist

As an Information Security GRC Specialist , you will be responsible for designing, implementing, and continuously improving the organization's information security governance, risk management, compliance across Snapp Cab and other ventures. You will work closely with Security, Engineering, Product, Legal, HR, and Business teams to ensure that information assets, business services, and AI-powered solutions are secure, compliant, and aligned with regulatory requirements and international standards.

• Design, implement, and continuously improve information security governance frameworks aligned with ISO 27001, NIST CSF, and organizational requirements.
• Conduct information security risk assessments and manage risk treatment plans.
• Plan, execute, and coordinate internal, external, and compliance audits.
• Develop and maintain security policies, standards, procedures, and governance documentation.
• Govern Identity & Access Management (IAM), including periodic access reviews and Joiner/Mover/Leaver processes.
• Perform third-party security and compliance assessments.
• Support the implementation of AI Governance frameworks and conduct AI risk assessments for AI-enabled solutions.
• Monitor compliance with regulatory, contractual, and industry security requirements.
• Prepare executive dashboards and reports covering security posture, risk, compliance, and governance metrics.
• Collaborate with Security, Engineering, Legal, HR, and Business teams to strengthen information security and AI governance across the organization.