Cybersecurity GRC Specialist

The Cybersecurity GRC (Governance, Risk, and Compliance) Specialist is responsible for developing, implementing, and maintaining the organization’s cybersecurity governance framework, risk management processes, and compliance programs. This role ensures that security policies, standards, and procedures are aligned with regulatory requirements and industry best practices, while supporting business objectives and minimizing cyber risks.

Responsibilities

• Develop, implement, and maintain cybersecurity governance frameworks, policies, and procedures.
• Conduct risk assessments to identify, evaluate, and mitigate information security risks across systems, processes, and vendors.
• Monitor and ensure compliance with relevant laws, regulations, and standards (e.g., ISO 27001).
• Collaborate with internal teams to ensure security controls are designed, implemented, and operating effectively.
• Prepare and deliver compliance reports, risk assessments, and audit findings to management.
• Support internal and external audits by providing documentation, evidence, and remediation plans.
• Provide guidance and training to employees on security policies and compliance requirements.
• Stay updated on emerging cybersecurity regulations, threats, and best practices.
• Assist in incident response planning and ensure governance and compliance aspects are addressed.
• Work closely with stakeholders to integrate GRC considerations into strategic and operational decision-making.

Qualifications & Skills

Senior management details

#J-18808-Ljbffr