Senior Security GRC Specialist

Job Summary

To strengthen and maintain information security governance, risk, and compliance, the full-time Senior Security GRC Specialist will manage security and compliance initiatives, coordinate audits and certifications, and support risk management activities in a remote environment.

Key responsibilities

• Support and mature the organization's Security GRC program, ensuring alignment with policies, standards, and regulations
• Coordinate external client audits, certifications, and assessments, including SOC 1, SOC 2, and ISO 27001
• Evaluate compliance status of IT and Information Security controls, identifying gaps and developing remediation plans

Required qualifications

• Bachelor's degree in Information Systems, Information Technology, Cybersecurity, or a related field
• 5+ years of experience in Information Technology, Information Security, Governance, Risk, and/or Compliance
• Strong experience in building and maturing Security Governance, Risk, and Compliance programs
• Knowledge of information security frameworks such as ISO/IEC 27001, NIST, and COBIT
• Experience with third-party/vendor security risk management and facilitating security audits