P
Information Security GRC Specialist
Not specifiedNot specifiedSecurity Program Management
Manage information security governance, risk, and compliance activities, including regulatory requirements, policies, assessments, controls, and supplier risk.
Responsibilities
- Monitor information security and cybersecurity regulatory requirements.
- Write, update, and implement information security policies and procedures.
- Manage information security assessments, validate findings, and track remediation.
- Perform controls and assess their effectiveness.
- Manage supplier and third-party supply-chain risks.
- Prepare status reports and present updates to management.
Requirements
- At least 3 years of experience in GRC or information security
- Knowledge of information security regulation, especially in the financial sector
- Experience conducting risk assessments, audits, and control reviews
- Experience writing information security policies and procedures
- Knowledge of ISO standards
- Experience with information security controls and ITGC
Nice to have
- Technical background
- Experience conducting security surveys or assessments