Mid-Level Cyber Security GRC Engineer

About the role

Axis is looking for a motivated Mid‑Level Governance, Risk and Compliance (GRC) Engineer to join its cybersecurity team. You will help build and maintain a robust GRC framework that supports the company’s digital banking and mobile wallet services, ensuring compliance with relevant regulations and standards.

Key responsibilities

• Assist in the development, implementation, and maintenance of GRC policies, standards, and procedures.
• Conduct risk assessments to identify, analyze, and evaluate potential risks and vulnerabilities across business functions and IT systems.
• Support monitoring of compliance with laws and standards such as GDPR, PCI DSS, ISO 27001, CIS, and SOC 2.
• Help execute internal and external audits, gather evidence, document findings, and track remediation.
• Contribute to GRC awareness and training programs for employees.
• Support the implementation and management of GRC tools and technologies.
• Collaborate with IT, Legal, HR and other teams to align GRC activities with business objectives.
• Prepare regular reports and dashboards on GRC status, risks, and compliance for management.

Required profile

• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• 2‑3 years of experience as a GRC analyst/engineer, information security analyst, IT auditor, or similar role.
• Strong understanding of GRC principles, frameworks and relevant regulations.
• Proven experience conducting risk assessments and identifying control weaknesses.
• Familiarity with audit processes and methodologies.

Required skills

• PCI DSS
• ISO 27001
• SOC 2
• NIST framework
• GDPR compliance
• Risk assessment techniques
• Audit documentation and remediation tracking