Cybersecurity GRC Specialist

TD SYNNEX; Alcobendas; Híbrido; EUR 60.000 - 100.000; Jornada completa

Descripción de la vacante

Join a forward-thinking global corporation as a Cyber Security GRC Specialist, where your expertise will shape the future of cybersecurity governance and compliance. In this pivotal role, you will implement risk management frameworks and lead compliance initiatives, ensuring the organization meets stringent cybersecurity standards. With options for fully remote or hybrid work, you'll thrive in a supportive environment that prioritizes continuous learning and professional growth. This is your chance to make a significant impact in a rapidly evolving cyber risk landscape while enjoying competitive compensation and comprehensive benefits.

Servicios

Health Insurance

Paid Leave

Retirement Plans

Continuous Learning Opportunities

Annual Salary Reviews

Formación

• 8+ years of information security expertise with a focus on governance and compliance.
• Experience with ISMS implementation and cybersecurity audits.

Responsabilidades

• Implement cybersecurity governance and risk management strategies.
• Lead compliance projects and support RM processes through automated tools.

Conocimientos

Cybersecurity Expertise

Risk Management Framework (RMF)

Information Security Management System (ISMS)

Compliance (CMMC, NIST, ISO27001)

Cyber Assurance

Educación

Computer Engineering

Related Fields of Study

Herramientas

GRC Tools

Descripción del empleo

As a Fortune 500 global corporation, operating in over 100 countries, TD SYNNEX values its diverse workforce of 22,000 employees. As the biggest IT distributor in the world, our mission is to provide top-notch cybersecurity solutions, empowering businesses and individuals to navigate the digital world safely and efficiently.

About the role :

As the Cyber Security GRC Specialist, you will be responsible for the implementation of the organization-wide RMF, Assurance, and ISMS to support the establishment and improvement of the information security program. The purpose of this position is to provide domain expertise for the implementation of the cybersecurity GRC management program.

Justification

Increased cyber risk landscape and company growth demands a mature risk management practice as part of the Office of the CISO. This is a common requirement per CMMC, NIST, and ISO27001 compliance among others, necessitating experienced staff to support various worldwide business units.

What you'll do :

1. Serve as a cybersecurity / IT RM and Cyber Assurance topics specialist for business stakeholders and customers.
2. Implement cybersecurity governance, risk management, and compliance vision, strategy, and implementation roadmap.
3. Lead implementation of TPRM / ITRM plans, cyber compliance projects, assessment / audit projects, dashboards, and reporting (KRIs / KPIs, CyberSecurity status scorecard).
4. Support the implementation of RM processes and ISMS through automated GRC tools.
5. Drive the maturity of the organization to implement RMF, ISMS ISO 27001, and CMMC compliance.

What we're kindly looking for :

• At least 8 years of experience with a high level of information security expertise.

Education in Computer Engineering or similar fields of study.

Desired certifications: CISM, CRISC, CISSP, ISO27001 LI / LA.

Knowledge of information security controls frameworks and RM methodologies.

Experience with ISMS implementation, ISO27001 certification, cybersecurity audits, and attestation reports.

What We Offer :

• Competitive compensation with regular annual salary reviews.
• Fully remote or hybrid work options (2 days office, 3 days home).
• Continuous learning and clear progression plans.
• Comprehensive benefits including health insurance, paid leave, retirement plans, and more.