GRC Specialist (Compliance) - CP Axtra

This role focuses on managing the day-to-day compliance operations to ensure the organization remains audit-ready. The specialist manages the evidence collection lifecycle for ISO 27001, PDPA, and PCI-DSS, coordinates with control owners, and tracks remediation actions. Responsibilities include coordinating internal and external audit logistics, producing compliance dashboards, and maintaining documentation. The position requires strong organizational skills and the ability to manage multiple concurrent compliance workstreams.

Manage the end-to-end evidence collection process for ISO 27001, PDPA, and PCI-DSS

Coordinate internal and external audit schedules

Track and drive remediation of audit findings and compliance gaps

Conduct control validation testing

Produce and maintain the compliance dashboard

Manage the security exception register

Support vendor compliance assessments

Coordinate with IT and business teams on control implementation

Maintain compliance documentation

Manage the end-to-end evidence collection process for ISO 27001, PDPA, and PCI-DSS

Coordinate internal and external audit schedules

Track and drive remediation of audit findings and compliance gaps

Conduct control validation testing

Produce and maintain the compliance dashboard

Manage the security exception register

Support vendor compliance assessments

Coordinate with IT and business teams on control implementation

Maintain compliance documentation