Join Our Talent Network

Experience required : Minimum 2 Years

Qualification: Bachelor’s degree in information security, Cybersecurity, Computer Science, or a related field. 

Role Summary: Responsible for supporting Lulu Retail’s information security governance, risk, and 
compliance (GRC) activities by identifying, assessing, monitoring, and reporting information security risks. 
The role assists in maintaining security policies, ensuring regulatory compliance, supporting audit 
activities, and promoting security awareness across the organization to strengthen the overall security 
posture.

Essential Duties & Responsibilities:
• Assist in the development, maintenance, review, and communication of information security 
policies, standards, procedures, and guidelines.
• Conduct information security risk assessments for systems, applications, cloud services, projects, 
and business processes, and track remediation of identified risks.
• Monitor and maintain compliance with applicable regulatory, legal, and industry requirements, 
including ISO 27001, NIST, PCI-DSS, GDPR, PDPL, and internal security policies.
• Coordinate and support internal and external audits, security assessments, and regulatory 
reviews, including evidence collection, stakeholder coordination, documentation, and 
remediation tracking.
• Monitor security governance, risk, and compliance activities and prepare periodic reports, 
dashboards, metrics, and management presentations on security posture and compliance status.
• Support information security awareness and training initiatives, including awareness campaigns, 
phishing simulations, and monitoring employee participation and effectiveness.
• Collaborate with IT, application, cloud, and security teams to ensure security controls are 
implemented, maintained, and aligned with organizational policies, regulatory obligations, and 
project requirements.
• Support third-party and vendor security risk assessments, including due diligence reviews, 
security evaluations, and follow-up on remediation actions.

Required Experience and skills: 
• Bachelor’s degree in information security, Cybersecurity, Computer Science, or a related field. A 
master’s degree is preferred.
• 2 years of experience in information security governance, risk, and compliance.
• Experience supporting ISO 27001, PCI-DSS, NIST, IT audits, or regulatory compliance programs is 
preferred.
• Good understanding of information security principles, risk management methodologies, and 
security frameworks.
• Professional certifications such as ISO 27001 LA, CISA, Security+ are desirable.
• Strong communication skills with the ability to explain technical concepts to non-technical 
stakeholders.
• Strong organizational and time management skills.
• Ability to work independently and collaboratively within a team