Information Security Analyst – GRC & AI Governance

About the role

The Information Security Analyst will support the bank’s governance, risk, and compliance (GRC) program, with a focus on information security and emerging artificial intelligence (AI) technologies. The role ensures that security controls, risk assessments, and compliance activities align with international standards and local regulations.

Key responsibilities

• Support the operation of information security GRC activities, including AI governance, in line with approved frameworks and policies.
• Maintain up‑to‑date security artefacts such as registers, assessments, policies, and standards.
• Conduct reviews, assessments, and analysis of security and AI‑related controls, documenting and tracking identified issues.
• Provide GRC input for projects, technology changes, third‑party engagements, and AI initiatives.
• Prepare clear, timely GRC reporting and analysis for senior leadership and internal stakeholders.

Required profile

• Bachelor’s or Master’s degree in IT, Computer Science, Information Security or a related discipline.
• Minimum 5 years of professional experience in IT or information security with exposure to GRC activities.
• Strong knowledge of security and risk management frameworks such as NIST, ISO/IEC 27001/27005, COBIT, COSO, ISACA and ISC².

Required skills

• CISSP
• CISM
• ISO27001
• CRISC
• CGRC
• COBIT
• COSO
• Hands‑on experience with risk assessments, compliance activities and policy management.