Senior GRC & Cyber Risk Specialist

Lever, Inc.; Colombia; A distancia; COP 120.000.000 - 180.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Premium Healthcare

Meal voucher

Maternity and Parental leaves

Mobile services subsidy

Sick pay-Life insurance

CI&T University

Colombian Holidays

Paid Vacations

Descripción de la vacante

CI&T is seeking a Senior GRC Security Analyst located in Colombia to maintain and enhance our Cybersecurity Risk Management process while ensuring adherence to regulatory requirements in the medical device sector. The role requires detail-orientation, proactive approach, and collaboration with international clients.

Responsibilities include managing enterprise risk, third-party assessments, controls management, and policy development.

Formación

• Advanced English for communication with international clients.
• Excellent communication with technical and non-technical stakeholders.
• Strong analytical and problem-solving skills.
• Ability to conduct cybersecurity risk assessments and mitigate risks.
• Experience collaborating with cross-functional teams on GRC policies and controls.
• Lead documentation of GRC processes and audits.

Responsabilidades

• Enterprise Cybersecurity Risk Management: log and analyze control nonconformities and vulnerabilities.
• Third-party Cybersecurity Risk Assessments: conducted annually to align with internal risk standards and regulatory requirements.
• Cybersecurity Controls Management: map controls, collect evidence, identify gaps, align requirements under a unified structure.
• Policies and Procedures Development: create and maintain cybersecurity policies and ensure regulatory compliance.

Conocimientos

Advanced English

Excellent communication

Analytical skills

Risk assessment

GRC knowledge

Cross-functional collaboration

Descripción del empleo

CI&T is seeking a Senior GRC Security Analyst located in Colombia to maintain and enhance our Cybersecurity Risk Management process while ensuring adherence to regulatory requirements in the medical device sector. The role requires detail-orientation, proactive approach, and collaboration with international clients.

Responsibilities include managing enterprise risk, third-party assessments, controls management, and policy development.