GRC Analyst

SeamlessHR, an HR and payroll technology company, is recruiting a GRC (Governance, Risk and Compliance) Analyst

Job Details

• Location: Ikeja, Lagos (Hybrid)
• Job Type: Full-time
• Experience: 2-5 years

Job Summary

The GRC Analyst will support the organization in establishing, implementing and maintaining effective governance, risk management and compliance practices. The role involves identifying and assessing business and operational risks, monitoring compliance with applicable laws and regulatory requirements, maintaining internal policies and controls, and supporting internal and external audits

The successful candidate will work closely with business units, technology teams and management to ensure that organizational processes align with regulatory obligations, industry standards, internal policies and established risk management frameworks

Key Responsibilities

• Support the implementation, governance, evidence management and ongoing compliance requirements for ISO/IEC 42001
• Support SOC 2 readiness, including control implementation, evidence collection, gap and remediation tracking and ongoing control monitoring
• Conduct and support risk assessments and maintain relevant risk and compliance records
• Perform periodic control testing and compliance monitoring to assess the effectiveness and operation of established controls
• Coordinate evidence collection for internal and external audits and track identified findings through remediation and closure
• Work with process owners and stakeholders across Engineering, Product, Legal and other functions to implement and maintain required controls
• Maintain governance and compliance documentation, including policies, procedures, control records and audit evidence
• Support continuous monitoring and audit-readiness activities for ISO/IEC 42001 and SOC 2
• Track compliance actions, findings and remediation commitments to ensure timely closure
• Support broader Information Security GRC initiatives as required

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Risk Management or a related field
• 2-5 years of experience in governance, risk management, information security, IT audit or compliance
• Practical understanding of information security management systems, risk assessment, control implementation and audit processes
• Familiarity with ISO/IEC 27001, ISO/IEC 42001, SOC 2 and relevant data protection regulations
• Experience maintaining risk registers, compliance documentation, audit evidence and corrective action trackers
• Strong analytical, documentation, communication and stakeholder management skills
• Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, ISO 42001 training, CISA, CRISC or equivalent are an advantage

How to Apply

Fill out the form on the website below

Application Deadline: 31st October, 2026