Information Security Analyst – GRC & AI Governance

About the role

The Information Security Analyst will support the bank’s governance, risk and compliance (GRC) program, with a focus on information security and emerging artificial intelligence (AI) technologies. The role ensures that security controls, risk assessments and compliance activities align with international standards and local regulations.

Key responsibilities

• Support the operation of information security GRC activities, including AI governance, in line with approved frameworks and policies.
• Maintain and update security artefacts such as registers, assessments, policies, standards and related documentation.
• Perform reviews, assessments and analysis of security and AI‑related controls, tracking issues and supporting remediation.
• Provide GRC input for projects, new technologies, third‑party engagements and AI initiatives.
• Prepare clear, timely GRC reporting and analysis for senior information security leadership.

Required profile

• Bachelor’s or Master’s degree in IT, Computer Science, Information Security or a related discipline.
• Minimum 5 years of professional experience in IT, information security or related fields with demonstrable GRC exposure.
• Hands‑on experience developing, implementing or maintaining security GRC processes such as risk assessments, compliance activities and policy management.

Required skills

• CISSP
• CISM
• ISO27001
• CRISC
• CGRC
• COBIT
• COSO
• NIST framework
• ISO/IEC 27001
• ISO/IEC 27005
• ISACA methodologies
• ISC² knowledge