Senior GRC Consultant

March 26

Apply Now

Receive Emails with Similar Jobs

CDW

WebsiteLinkedInAll Job Openings

CDW is a leading provider of technology solutions, offering a comprehensive range of products and services to address the needs of enterprises, government, healthcare, and education sectors. They specialize in providing IT infrastructure services, managed services, and security solutions. CDW partners with top technology brands to deliver customized solutions that enhance business productivity and performance across various industries. With a strong focus on digital transformation, security, and cloud solutions, CDW supports businesses in navigating the complexities of modern IT environments. Their expertise spans several domains, including digital workspaces, cybersecurity, and enterprise solutions, making CDW a key partner in driving technological advancements.

Security • Cybersecurity • Health Tech • Retail Tech • Small Business Tech

10,000+ employees

Founded 1984

🏢 Enterprise

☁️ SaaS

🔒 Cybersecurity

💰 Post-IPO Equity on 2015-07

📋 Description

• Join CDW as a Security Assurance & GRC Lead, responsible for security and compliance programs. • Design, implement, and maintain GRC frameworks, leading security assurance initiatives. • Reduce risk exposure, ensure compliance with regulatory requirements, and strengthen security posture. • Develop unit level procedures to align with governance policies based on industry frameworks. • Conduct assessments to ensure compliance and operational effectiveness of security controls. • Provide support for internal and external audits and risk assessments. • Act as a liaison between security, IT, and business teams for effective control optimization.

🎯 Requirements

• 7+ years of experience in information security, risk management, or GRC roles. • 3+ years of hands-on experience in control design, assurance, and audit functions. • Deep knowledge of security frameworks (NIST CSF, ISO 27001, SOC 2, PCI DSS 4.0, NIST 800-53). • Familiarity with CMMI maturity models for control evaluation and process improvement. • Strong understanding of privacy regulations (NIST Privacy Framework, GDPR, CCPA) and data protection principles. • Excellent analytical and problem-solving skills, with the ability to assess risks and improve control effectiveness. • Strong communication and stakeholder management skills to work across business and technical teams. • Preferred Certifications: CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional).

🏖️ Benefits

• Annual bonus target of 10% subject to terms and conditions of plan • Benefits overview: https://cdw.benefit-info.com/