Cyber Security Engineer

About the role

Axis is looking for a motivated mid‑level Governance, Risk and Compliance (GRC) Engineer to join its cybersecurity team. The role focuses on building and maintaining a robust GRC framework that supports the company’s digital banking and mobile wallet services.

Key responsibilities

• Develop, implement and maintain GRC policies, standards and procedures.
• Conduct risk assessments across business functions and IT systems to identify vulnerabilities.
• Monitor compliance with regulations such as GDPR, PCI DSS, ISO 27001, CIS Controls and SOC 2.
• Support internal and external audits, gather evidence, document findings and track remediation.
• Deliver GRC awareness and training programs for employees.
• Assist with the implementation and management of GRC tools and technologies.
• Collaborate with IT, Legal, HR and other teams to align GRC activities with business objectives.
• Prepare regular reports and dashboards on GRC status, risks and compliance for management.
• Participate in business continuity, disaster recovery and third‑party risk management activities.

Required profile

• Bachelor’s degree in IT, Cybersecurity or a related field.
• 2‑3 years of experience in GRC, information security analysis, IT audit or a similar role.
• Strong understanding of GRC frameworks and relevant regulations.
• Experience conducting risk assessments and identifying control gaps.
• Familiarity with audit processes and methodologies.
• Excellent analytical and problem‑solving abilities.

Required skills

• PCI DSS
• CIS Controls
• SOC 2
• NIST framework
• GDPR
• ISO 27001