GRC Trainee: Cybersecurity Policy & Risk Support

ACE Money Transfer; Kharian; On-site; PKR 700,000 - 1,000,000; Full time

Job summary

ACE Money Transfer is seeking an Officer – GRC to support the Cybersecurity team in maintaining security policies, records and controls. This hands-on learning role develops the trainee into a capable GRC practitioner while assisting with documentation, tracking and reporting tasks.

The ideal candidate has a degree in a related field and a basic understanding of information security, with strong written communication and attention to detail.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or a related field.
• Basic understanding of information security concepts.
• Strong written communication and attention to detail.
• Comfortable using Microsoft Word, Excel and PowerPoint.
• Organised and able to manage several tasks to deadline.
• Trustworthy in handling confidential information.

Responsibilities

• Keep security policies, procedures and registers up to date and well organised.
• Help maintain the risk register and follow up with owners for updates.
• Collect and organise evidence needed for audits and reviews.
• Support user access reviews by gathering data and flagging anything unusual.
• Help complete security questionnaires from partners and vendors.
• Track open actions and control gaps until they are closed.
• Support reporting to management, including simple dashboards and summaries.
• Provide general support to the GRC team, such as scheduling reviews and taking notes.

Skills

InfoSec basics

Written communication

MS Office

Time management

Confidentiality

Education

Bachelor’s degree

Tools

MS Office Suite

Job description

ACE Money Transfer is seeking an Officer – GRC to support the Cybersecurity team in maintaining security policies, records and controls. This hands-on learning role develops the trainee into a capable GRC practitioner while assisting with documentation, tracking and reporting tasks.

The ideal candidate has a degree in a related field and a basic understanding of information security, with strong written communication and attention to detail.