Senior GRC Security Specialist (Colombia)

Ciandt; Colombia; A distancia; COP 80.000.000 - 120.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Premium Healthcare

Meal voucher

Maternity and Parental leaves

Mobile services subsidy

Sick pay-Life insurance

CI&T University

Colombian Holidays

Paid Vacations

Descripción de la vacante

CI&T in Colombia is seeking a Senior GRC Security Specialist to join our cybersecurity team. The role focuses on maintaining and enhancing our risk management processes and ensuring compliance with industry standards in the medical device sector.

You will lead risk assessments, coordinate audits, and help implement controls aligned with HITRUST, HIPAA, and other regulations, collaborating with global teams to deliver secure, compliant solutions.

Formación

• Advanced English required for communication with international clients.
• Excellent communication skills across technical and non-technical stakeholders.
• Strong analytical and problem-solving abilities, capable of making informed decisions under pressure.
• Conduct cybersecurity risk assessments and identify vulnerabilities with mitigation strategies.
• Collaborate with cross-functional teams to implement GRC policies, procedures and controls.
• Lead efforts to maintain and update documentation related to GRC processes, risk assessments, policies and procedures.
• Participate in internal and external audits and provide documentation to demonstrate compliance.
• Solid understanding of GRC frameworks, industry standards and regulatory requirements.

Responsabilidades

• Enterprise Cybersecurity Risk Management: identify, document, and address control nonconformities and high-risk vulnerabilities; maintain the Risk Registry.
• Third-party Cybersecurity Risk Assessments: perform annual assessments in line with internal and external standards.
• Cybersecurity Controls Management: maintain and enhance control framework; map controls and evidence of execution; identify gaps and align requirements (HITRUST, HIPAA, ENS).
• Policies and Procedures Development: create and maintain cybersecurity policies and procedures in compliance with regulatory and contractual standards.

Conocimientos

Advanced English

Excellent communication

Analytical thinking

Risk assessment

Cross-functional collaboration

Documentation management

Audit support

GRC knowledge

Descripción del empleo

CI&T in Colombia is seeking a Senior GRC Security Specialist to join our cybersecurity team. The role focuses on maintaining and enhancing our risk management processes and ensuring compliance with industry standards in the medical device sector.

You will lead risk assessments, coordinate audits, and help implement controls aligned with HITRUST, HIPAA, and other regulations, collaborating with global teams to deliver secure, compliant solutions.