GRC Specialist

Що робити

Own and coordinate day-to-day GRC activities across information security, risk management, compliance, and assurance.
Conduct information security risk assessments, identify control gaps, document risks, and track remediation actions with relevant owners.
Support the implementation, maintenance, and continuous improvement of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
Monitor relevant regulatory and contractual requirements and help translate them into practical security controls and compliance activities.
Coordinate and support internal and external audits, cer

4–6+ years of experience in Information Security, GRC, Risk Management, Compliance, IT Audit, or a related field.
Strong practical knowledge of information security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, CCSS or similar.
Experience working with applicable regulatory requirements such as NIS2, DORA, GDPR, or other relevant regulations.
Hands-on experience conducting information security risk assessments, control assessments, gap analyses, and compliance reviews.
Experience supporting or coordinating internal and external audits, certifications, and regulatory assessments.

Experience in SaaS, cloud-based, technology, or other highly regulated environments.
Experience with GRC platforms or compliance automation tools such as ServiceNow GRC, OneTrust, Vanta, Drata, AuditBoard, or similar.
Familiarity with cloud platforms such as AWS, Azure, or GCP from a governance and compliance perspective.
Relevant professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor.
Experience participating in or leading compliance improvement and control maturity initiatives.

Знайдено через trackr.help/jobs · Канал: @trackrhelp · Бот для персональних сповіщень: @trackrhelpBot