The Cybersecurity Governance, Risk, and Compliance (GRC) Specialist ensures that security practices, controls, and documentation align with regulatory frameworks and organizational objectives.
Responsibilities:
Develop, implement, and maintain cybersecurity governance frameworks and risk management processes.
Conduct compliance audits (ISO 27001, SOC 2, NIST, PCI?DSS).
Track and remediate identified risks using appropriate tools and controls.
Prepare and maintain policies, standards, and procedures.
Support awareness campaigns and compliance reporting.
Requirements:
Experience:
4-7 years in cybersecurity governance or risk management.
Education:
Bachelor's in Computer Science, Information Security, or equivalent.
Certifications:
ISO 27001 Lead Implementer, CompTIA Security+, or CISSP (asset).