GRC Consultant

March 18

Apply Now

Receive Emails with Similar Jobs

ConnectOS

WebsiteLinkedInAll Job Openings

ConnectOS is a leading provider of offshore talent for organisations in Australia, New Zealand, the US, Canada and the UK. For over a decade, we’ve been supporting our global clients with premium resourcing and productivity solutions.ConnectOS is one of the fastest-growing offshoring companies in the world. Founded by our Australian CEO, we help companies across a range of industries activate their capability strategies and optimise their business operations with smarter ways to solve resourcing challenges. Our vibrant, modern work environments achieve high levels of employee engagement: happy, healthy, committed people who love what they do. ConnectOS Team HQ is located at Mega Tower, EDSA in the heart of Manila, Philippines. Our Client Support HQ is based in Melbourne, Australia.

1001 - 5000 employees

📋 Description

• Salary: P180,000 - P220,000 (Monthly Package) • Schedule: Monday to Friday (07:00 AM to 04:00 PM Manila Time) • Skills Required: • Cyber Security • Risk Management • IT Compliance • HIPAA • Nice to Have: • Cyber Security Certification is a plus but not required • What will you do? • Strategy Development and Implementation • Develop and implement tailored GRC strategies, frameworks, and roadmaps based on industry best practices, including NIST CSF 2.0, and organizational needs. • Align governance, risk management, and compliance efforts with strategic business goals and evolving regulatory requirements. • Provide expert guidance on integrating NIST CSF 2.0 into governance, risk, and compliance initiatives to enhance cybersecurity resilience. • Act as a strategic advisor to leadership on embedding GRC practices into core business functions. • Risk Assessment and Management • Conduct detailed risk assessments aligned with NIST CSF 2.0 to identify cybersecurity threats, vulnerabilities, and compliance gaps. • Develop, implement, and monitor risk mitigation strategies based on the Identify, Protect, Detect, Respond, and Recover pillars of NIST CSF 2.0. • Maintain and regularly update the risk register, ensuring all identified risks are documented and effectively managed. • Regulatory Compliance • Interpret and implement relevant regulations, standards, and frameworks, such as ISO 27001, GDPR, NIST CSF 2.0, HIPAA, and PCI DSS. • Support organizations in preparing for compliance audits and certification processes. • Continuously monitor regulatory changes and their impact on organizational policies and practices, providing actionable recommendations. • Policy Development and Enforcement • Develop, review, and implement security and compliance policies aligned with NIST CSF 2.0 and other applicable standards. • Promote adherence to established policies through regular audits, training, and monitoring programs. • Enhance cybersecurity governance by enforcing consistent compliance with NIST CSF 2.0 controls. • Auditing, Monitoring, and Reporting • Conduct regular audits to ensure compliance with internal policies, external regulations, and NIST CSF 2.0 guidelines. • Generate detailed reports for stakeholders, including actionable insights to improve governance, risk management, and compliance posture. • Design and track key performance indicators (KPIs) to measure the effectiveness of GRC initiatives and alignment with NIST CSF 2.0. • Training and Awareness • Develop and deliver training programs to enhance awareness of NIST CSF 2.0, GRC practices, and cybersecurity resilience. • Facilitate workshops on emerging risks, compliance updates, and industry best practices. • Collaborate with teams to ensure organization-wide understanding and application of NIST CSF 2.0 principles. • Technology and Tools • Evaluate and implement GRC tools and technologies that support NIST CSF 2.0 adoption, compliance automation, and risk management. • Provide guidance on integrating GRC software, such as SAP GRC, RSA Archer, or ServiceNow, into existing systems. • Join the awesome team and enjoy these benefits & perks:

🎯 Requirements

🏖️ Benefits

• WFH • Paid Vacation and Sick Leave (with Quarterly Sick Leave Conversion) • Competitive salary package and annual appraisal • Financial Assistance Program • Mandatory Government Benefits and 13th Month Pay • Regular Company Events, Work Life Balance, and Career growth opportunities