P
Information Security GRC Specialist
Не указаноНе указаноSecurity Program Management
Manage information security governance, risk, and compliance activities, including regulatory requirements, policies, assessments, controls, and supplier risk.
Обязанности
- Monitor information security and cybersecurity regulatory requirements.
- Write, update, and implement information security policies and procedures.
- Manage information security assessments, validate findings, and track remediation.
- Perform controls and assess their effectiveness.
- Manage supplier and third-party supply-chain risks.
- Prepare status reports and present updates to management.
Требования
- At least 3 years of experience in GRC or information security
- Knowledge of information security regulation, especially in the financial sector
- Experience conducting risk assessments, audits, and control reviews
- Experience writing information security policies and procedures
- Knowledge of ISO standards
- Experience with information security controls and ITGC
Будет плюсом
- Technical background
- Experience conducting security surveys or assessments