1. Governance & Compliance Expert

• Design, implement, and manage GRC frameworks (e.g., ISO 27001, PCI-DSS, FRA Regulation, SOC 2) tailored to client needs.
• Develop and maintain security policies, standards, and procedures aligned with regulatory requirements (ISO27001, PCI-DSS, etc.).
• Lead compliance audits (internal/external) and certification processes (e.g., ISO 27001, PCI-DSS).
• Conduct gap analyses and maturity assessments to identify areas for improvement.

2. Risk Management & Assessment

• Perform enterprise-wide risk assessments to identify threats, vulnerabilities, and business impacts.
• Create risk treatment plans, mitigation strategies, and risk registers for clients.
• Advise on third-party/vendor risk management, including due diligence and contract reviews.

3. Client Advisory & Collaboration

• Act as a trusted advisor to clients, translating technical risks into business terms for executives and stakeholders.
• Deliver executive-level reports, dashboards, and workshops on GRC initiatives.
• Support pre-sales activities (scoping, proposals) and post-sales service delivery to ensure client success.

4. Audit & Documentation

• Prepare and maintain audit documentation (e.g., ISO evidence, PCI Compliance Report).
• Manage remediation efforts for audit findings and compliance gaps.
• Stay updated on evolving regulations and industry standards.

6. Strategic Initiatives

• Lead security awareness programs for clients, including training and phishing simulations.
• Mentor junior team members and contribute to internal knowledge sharing.