GRC & Information Security Analyst

About the role

We are seeking a GRC & Cyber Resilience Associate to help build and deliver cybersecurity governance, risk, compliance, and cyber resilience services. You will work on information security governance, risk assessments, policies, audits, ISO 27001 implementation and regulatory requirements.

Key responsibilities

• Support GRC assessments, audits, and compliance engagements.
• Develop and maintain information security policies, procedures, registers, and documentation.
• Assist with ISO 27001 implementation and improvement.
• Conduct security and compliance gap assessments.
• Research cybersecurity regulations, standards, and industry requirements.
• Help clients identify and address governance, risk, and compliance gaps.
• Contribute to building Trinity Technology's GRC and cyber resilience practice.

Required profile

• Strong interest in cybersecurity governance, risk, and compliance.
• Understanding of information security fundamentals.
• Good analytical, research, and documentation skills.
• Ability to interpret regulations and translate them into practical controls.
• Strong written and verbal communication.
• Curiosity and willingness to learn; ISO 27001 knowledge or certification is an advantage.

Required skills

• Knowledge of ISO 27001.
• Familiarity with security policies and risk assessment processes.

What we offer

• Professional training and certification support.
• Exposure to real‑world cybersecurity and GRC engagements.
• Opportunities to work with clients in Nepal and internationally.