Conduct comprehensive risk assessments to identify potential cyber threats and vulnerabilities within the organization's IT systems and processes.Develop and maintain governance, risk management, and compliance frameworks to ensure adherence to industry standards and regulatory requirements (ISO 27001, NIST Cybersecurity Framework, GDPR, COBIT).Perform gap analyses to identify areas of improvement in existing controls and processes and recommend and implement remediation measures.Collaborate with cross-functional teams to develop and update information security policies, standards, and procedures.Supported the development and implementation of information security policies and procedures.Assisted in regulatory compliance efforts by mapping controls to relevant frameworks and regulations.Conduct internal audits to assess the effectiveness of controls and verify compliance with policies and regulations.Monitor and report on key risk indicators, providing regular updates to senior management on the organization's risk posture.Assist in the development and delivery of cybersecurity awareness training programs to educate employees on security best practices and compliance obligations.Stay updated on emerging cyber threats, industry trends, and regulatory changes to ensure the organization's GRC program remains current and effective.