Security Risk and Compliance Management Specialist III

View full description

Requirements:

• Strong understanding of Archer GRC Tool. Development is not a must but navigation is.
• Strong communication skills, ability to navigate across departments and network with various employees across the department to solve issues, host trainings, run meetings and workshops etc.
• Minimum of 5-8 years of practical information security experience in developing and maintaining secure architectures for large enterprises is preferred.

Responsibilities:

• Responsible for running policy workshops to triage policy intake request for the modification and/or creation of new policies, control standards, and procedures.
• Responsible for facilitating the annual policy attestation cycle where owners must leverage the GRC tool, Archer to sign off or modify their control statements.
• Responsible for security onboarding for all new recruits as well as annual security refresher training.
• Lead for National Cyber Security Awareness Month.
• Lead for hosting phishing program and campaigns to increase employee vigilance.
• Lead for ad-hoc training and role-based training per utilized SAT platforms.
• Support other areas who rely on security training or awareness needs.