Job Description

Responsibilities :
- Assist in collecting evidence for internal and external audits.
- Support the updating and maintenance of IT policies, standards, and procedures.
- Help perform basic risk assessments and document risk findings.
- Conduct initial vendor risk reviews (questionnaires, documentation checks).
- Support compliance activities (ISO 27001, NIST, PDPA, etc).
- Assist with monitoring and tracking remediation actions.
- Prepare reports, logs, and documentation for the GRC team.
- Perform research on regulatory requirements, security best practices, and GRC frameworks.
- Help coordinate awareness trainings and governance initiatives
- Assist with data entry and maintaining GRC tools or dashboards.

Requirements :
- Currently pursuing or recently completed a degree in Information Systems, Cybersecurity, Computer Science, Business, or Accounting (for compliance/audit roles).
- Basic understanding of IT concepts (networks, systems, data security)
- Familiarity with information security frameworks (ISO 27001, NIST) is a plus.
- Strong analytical and documentation skills
- Good communication and willingness to learn