Infosec GRC Specialist

March 13

Apply Now

Receive Emails with Similar Jobs

Ryz Labs

WebsiteLinkedInAll Job Openings

Ryz Labs builds startups from the ground-up and helps other startups scale by providing top-tier technical talent solutions.

Startups • Technology • Software Development

11 - 50 employees

📋 Description

• Only for candidates in Argentina or Uruguay. • We are looking for a Infosec GRC Specialist for one of our clients teams. • They are expanding their Information Security team and they are looking for an energetic and self-motivated Infosec GRC Specialist to join the global Infosec team. • You will be tasked with leading our compliance initiatives across Data Privacy, PCI, Sarbanes-Oxley ITGCs, and SOC2. • Responsibilities: • Lead and oversees strategic GRC programs and projects, from concept/definition through planning, execution, delivery, and adoption • Coordinate compliance projects with key stakeholders throughout the company including Legal, Internal Audit, IT & Information Security, and Engineering • Build and maintain a unified information security control framework that will meet Control requirements across PCI, SOC2, ISO 27001, NIST CSF, GDPR, CCPA, and other relevant global data privacy regulations. • Create and lead our internal vendor risk management program • Attend regular cross departmental security meetings as the GRC point of contact • Ensure that cyber security risks are logged, tracked and scored in accordance with Risk Management Policy • Take ownership of the cyber risk register and track risks through the remediation phase with key stakeholders in Engineering, IT, and Business Applications. • Create, update and maintain GRC Policy & Procedures • Prepare cyber risk reports and metrics to communicate the security posture for Executives and Board of Directors.

🎯 Requirements

• A Bachelor’s degree or higher or equivalent work experience • 5+ years of experience managing IT Risk & Compliance Programs • Excellent written and verbal communication skills. • Strong technical project management experience. • Experience mapping unified controls across common security frameworks • Experience with GRC Tools such as ZenGRC, OneTrust, Pathlock, Riskonnect, AuditBoard, etc. • Knowledge of Security Frameworks including ISO27001, SOC2, Data Privacy (GDPR, CCPA), NIST CSF, and PCI • Experience implementing repeatable processes and driving automation or standardization • Ability to work across different levels in the organization from Individual contributor to C-Level Executives. • Strong analytical and problem solving skills • IT Audit Background • Experience in a global organization • Experience in building 3rd Party/Vender Risk Programs