ABA Bank

Information Security Governance, Risk, and Compliance (GRC) Specialist

SecurityPosted 17 hr ago

Location

Head Office

Job Type

FULLTIME

Experience

3+ Years

Level

Mid

Work Mode

On-site

Apply Now

About the role

Support the effective operation of the Bank’s information security governance, risk, and compliance (GRC) activities, including governance of artificial intelligence (AI) and data-driven technologies, in line with approved frames and policies.
Contribute to the ongoing enhancement and maintenance of information security and AI-related GRC processes to ensure alignment with regulatory requirements, internal governance standards, and recognized international best practices (e.g. NIST, ISO).
Perform and support assigned GRC activities, including reviews, assessments, and analysis of information security and AI-related controls, and assist with the documentation, tracking, and follow-up of identified issues.
Maintain accurate, complete, and up-to-date information security and AI governance artefacts, including registers, assessments, policies, standards, and supporting documentation.
Provide GRC input for projects, significant changes, new technologies, third-party engagements, and AI initiatives to ensure governance, risk, and compliance considerations are addressed.
Prepare clear, timely, and reliable information security and AI-related GRC reporting and analysis to support management oversight and informed decision-making.
Perform other tasks as assigned.

Requirements

Bachelor’s or Master’s degree in Information Technology, Computer Science, Information Security, or a related technical or risk management discipline.
One or more of CISSP, CISM, ISO27001, CRISC, CGRC, COBIT, COSO.
Minimum of three to five years’ professional experience in Information Technology, Information Security, or related fields, with demonstrable exposure to governance, risk, and compliance activities.
Good ing knowledge of information security and risk management frames and standards, such as NIST, ISO/IEC 27001/27005, COBIT, COSO, ISACA, and ISC².
Hands-on experience supporting the development, implementation, or maintenance of information security GRC processes, including risk assessments, compliance activities, policy management, or assurance support.
Experience developing, reviewing, or maintaining information security documentation, such as policies, standards, procedures, risk registers, and assessment artefacts.
Strong analytical skills with the ability to assess information, identify issues, and clearly summaries findings for reporting and follow-up actions.
Effective written and verbal communication skills, with the ability to engage constructively with technical and non-technical stakeholders.
High level of integrity, professionalism, and accountability, with a strong attention to accuracy and detail.
Experience supporting audits, regulatory reviews, or internal assurance activities.
Exposure to AI, data-driven technologies, or technology risk governance is an advantage.

Required Skills

Information TechnologyComputer ScienceInformation SecurityRisk ManagementCISSPCISMISO27001CRISCCGRCCOBITCOSOGovernanceRiskComplianceNISTISO/IEC 27001/27005ISACAISC²GRC processesrisk assessments

About ABA Bank

Visit Website

More at ABA Bank

Other open roles at this company

5 open

Medium Loan Officer

Soutr Nikom District Branch - Dam Daek CommuneOTHER

Solution Architect

Head OfficeFULLTIME

Database Administrator

Head OfficeFULLTIME

Small Loan Officer

Koh Kong Provincial BranchFULLTIME

Small Loan Officer

Preah Sihanouk Provincial BranchFULLTIME