Cybersecurity GRC Associate (Governance, Risk & Compliance)

Location: Accra, Ghana
Employment Type: Full-time
Application Deadline: 30 July 2026

Company Profile

RightCom has been revolutionizing customer experience across Africa for more than a decade. We create innovative digital solutions that make every customer journey seamless, personalized, simple, and outstanding. Today, we empower businesses across approximately 30 markets to thrive in the experience economy.

Our customer experience platform, RightCom XP, enables businesses to anticipate customer needs while identifying opportunities for upselling and cross-selling across every touchpoint—from mobile applications and websites to contact centres, physical locations, and agent networks. Through RightCom OS, we also deliver next-generation managed services that help organisations operate more efficiently and securely.

At RightCom, our core values of Creativity, Trust, and Customer Success shape everything we do. We are investing in an organisation-wide digital transformation to strengthen our people, technology, and data capabilities, enabling digital-first delivery across every product and service. As we continue to grow, we are looking for talented professionals who are passionate about innovation, collaboration, and making a meaningful impact.

Job Overview

We are seeking a proactive and detail-oriented Cybersecurity GRC Associate (Governance, Risk & Compliance) to support our cybersecurity governance, risk management, and compliance programmes.

In this role, you will help ensure that RightCom’s systems, processes, and operations comply with recognized security standards, regulatory requirements, and internal policies. You will work closely with technical and business teams to identify cybersecurity risks, support audit activities, strengthen governance practices, and contribute to building a strong security culture across the organisation.

Key Responsibilities

Governance & Policy Management

You will:

• Support the development, implementation, and maintenance of cybersecurity policies, standards, and procedures.
• Ensure security policies align with recognised frameworks such as ISO 27001, NIST, and other industry best practices.
• Participate in internal governance meetings and security initiatives.
• Promote continuous improvement of governance processes across the organisation.

Risk Management

You will:

• Identify, assess, monitor, and report cybersecurity risks across systems, applications, and business processes.
• Maintain cybersecurity risk registers and monitor mitigation activities.
• Support risk assessments, security impact assessments, and risk treatment planning.
• Collaborate with stakeholders to reduce organisational cybersecurity risks.

Compliance & Audit

You will:

• Support internal and external audits, including ISO certifications, regulatory reviews, and customer security assessments.
• Help ensure compliance with applicable information security, privacy, and data protection regulations.
• Monitor compliance activities and prepare reports on the organization’s security posture.
• Assist in implementing corrective actions arising from audit findings.

Security Awareness

You will:

• Support cybersecurity awareness and training programmes for employees.
• Promote security best practices and responsible handling of organisational information.
• Encourage a culture of security awareness throughout the business.

Reporting & Documentation

You will:

• Prepare reports on cybersecurity risks, compliance performance, and security controls.
• Maintain accurate documentation for policies, procedures, audits, and risk assessments.
• Support the continuous improvement of Governance, Risk, and Compliance (GRC) processes and documentation.

Education

The ideal candidate will possess:

• A Bachelor’s degree or Master’s degree in Cybersecurity, Information Systems, Computer Science, Risk Management, Information Technology, or a related discipline.

Experience

The successful candidate should have:

• One (1) to three (3) years of experience in cybersecurity, information security, governance, risk management, compliance, or audit.
• Experience supporting compliance programmes, security audits, or risk management initiatives.
• Exposure to enterprise information security practices within a corporate environment.

Knowledge and Technical Skills

Candidates should demonstrate knowledge of:

• Information Security Governance
• Risk Management principles
• Security frameworks such as ISO 27001, NIST, GDPR, or similar standards
• IT infrastructure, networks, and cybersecurity fundamentals
• Information security policies, controls, and regulatory compliance requirements

Languages

• Fluency in English is required.
• Working knowledge of French is considered an advantage.

How to Apply

Apply online by clicking on the Application button.