Elee Consulting Ltd values staff human resource as the most important asset of a company.
Please visit our website http://www.eleecl.com for more job vacancies

Job duties:
We are seeking a highly skilled Governance, Risk, and Compliance (GRC) Manager / (Senior) Specialist to join our cybersecurity team. The ideal candidate will be responsible for developing and overseeing the organization’s cybersecurity governance framework, managing risks, and ensuring compliance with regulatory and industry standards.

Responsibilities:
Develop, implement, and maintain the GRC framework, including policies, standards, and procedures to ensure compliance with regulations and industry best practices.
Conduct risk assessments and gap analyses to identify and prioritize cybersecurity risks. Collaborate with stakeholders to develop and track risk mitigation plans.
Lead compliance efforts for standards such as PCI DSS, ISO 27001, NIST, GDPR, and other relevant frameworks such as CRFA, CI Bill. Coordinate audits and prepare reports for internal and external stakeholders.
Provide guidance to business units and IT teams on compliance requirements and risk management strategies.
Monitor and report on GRC program effectiveness, including key risk indicators (KRIs) and compliance metrics. Deliver regular updates to senior management.
Perform other cybersecurity duties as directed by supervisor.

Requirements:
Degree holders with a keen interest in cybersecurity, risk management, or compliance.
At least 10 years’ experience in technology or risk management industries, with at least 5 years in GRC or related security roles.
Self-motivated and able to work independently. Strong project management, analytical, and interpersonal skills.
Good command of written and spoken English and Chinese.
Certification in cybersecurity or GRC, such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Auditor (CISA), preferred.
Hands-on experience with GRC platforms and compliance frameworks (e.g., PCI DSS, ISO 27001, CRAF, CI Bill) is highly preferred.

Please send resume with expected salary in word format via email: akwan1@eleecl.com