GRC Lead

View full description

Requirements:

• 3 years of experience in a Cyber Security role.
• 1+ years of experience in an Information Technology role.
• 1+ years of experience using OneTrust or similar platform.
• Management experience in cyber vulnerability management, governance and risk, or training.
• Knowledge of cyber threats and vulnerabilities.
• Familiarity with NIST 800-53, ISO 27001, CIS Benchmarks, SOX Compliance, GDPR.
• Excellent communication skills for technical and non-technical audiences.
• Experience working with partners and vendors on tight deadlines.
• Self-motivated with creative and critical thinking abilities.
• Comfortable with ambiguity.

Responsibilities:

• Develop programs supporting IT and InfoSec Risk and Compliance.
• Manage vulnerability assessments and remediation processes.
• Conduct risk assessments and track remediation of security gaps.
• Oversee third-party risk assessments and create treatment plans.
• Create and deliver role-based cyber awareness training.
• Develop and maintain cyber and IT policies and operating procedures.
• Collect and report metrics to IT and InfoSec leadership.
• Act as a liaison for audits of controls and standards.