Overview

Cargills Bank PLC is hiring a GRC (Governance, Risk and Compliance) Analyst for its Information Security Department. Applications close on 2 November 2026 and go by email.

Duties

  • Maintain the Information Security Management System (ISMS) documentation, including policies, standards, procedures, control libraries and evidence repositories
  • Coordinate the policy lifecycle and manage risk-based justifications and time-bound plans
  • Support enterprise security risk assessments and Risk and Control Self-Assessments (RCSAs) by running workshops, finding control gaps and tracking mitigation plans to closure
  • Maintain the Information Security Risk Register and the Control Ownership Matrix
  • Assist with ISMS, BCMS, AIMS, PDPA and ITSM operations, control performance monitoring, corrective and preventive action tracking, and certification support
  • Coordinate compliance monitoring against CBSL technology risk expectations and prepare evidence and responses for regulatory engagements
  • Support PCI DSS and SWIFT CSP compliance activities with system and process owners
  • Prepare evidence packs for internal and external audits, answer audit queries and track audit findings and management action plans
  • Support third-party security due diligence by managing questionnaires, reviewing evidence and tracking issues with procurement and vendors
  • Support periodic reviews of asset inventories, data classification and control alignment
  • Support Information Security Committee (ISC) activities with reports, meeting materials, action trackers and follow-ups

Experience and qualifications

  • Strong knowledge of ISO/IEC 27001, 27002, 27701, 20001 and 42001 controls and integrated management system operations
  • Familiarity with the NIST CSF and related control frameworks
  • Understanding of CBSL technology risk expectations and practical compliance in a Sri Lankan banking context
  • Awareness of Sri Lankan Personal Data Protection Act (PDPA), PCI DSS and SWIFT CSP requirements
  • Hands-on experience supporting risk assessments, RCSAs, control testing and remediation tracking
  • Strong coordination and stakeholder management skills across Technology, Risk, Compliance, Internal Audit and external vendors

Salary

No amount is stated in the notice.

සිංහලෙන්

GRC Analyst vacancy at Cargills Bank in Sinhala

How to apply

Email your CV to career@cargillsbank.com on or before 2 November 2026, with the post applied for in the subject line.

Address: Head of Human Resources, Cargills Bank PLC, No. 696, Galle Road, Colombo 03. Phone: 011 7 640 640.