Grc Specialist

Tata Consultancy Services; Branchville (NJ); Sur place; USD 81 000 - 110 000; Plein temps

Avantages offerts par ce poste

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family Support: Parental Leaves

Auto & Home Insurance

Commuter Benefits

Certification & Training Reimbursement

Vacation & Holidays

401K Plan

Résumé du poste

Tata Consultancy Services Limited is seeking a results-driven specialist to execute GRC activities, document risks, map controls, and track exceptions. You will support policy lifecycle updates and prepare governance materials for risk reviews and audits.

The role emphasizes collaboration with risk stakeholders to validate evidence, remediation progress, and alignment with regulatory expectations.

Qualifications

• Working understanding of cybersecurity, risk management, compliance, vulnerability management, audit, or third-party risk concepts.
• Ability to evaluate security evidence, identify gaps, and escalate risk concerns.
• Strong attention to detail and ability to manage multiple assessments and remediation activities.

Responsabilités

• Execute assigned GRC activities, including risk documentation, control mapping, exception tracking, and assessment record maintenance.
• Support policy lifecycle updates, collect inputs, and validate approvals.
• Prepare materials for governance forums, risk reviews, audit discussions, and compliance reporting.

Connaissances

Cyber Security

GRC

Risk Management

Audit

Vendor Risk

Documentation

Communication

Formation

Bachelor of Computer Science

Description du poste

Must Have Technical/Functional Skills

• Working understanding of cybersecurity, risk management, compliance, vulnerability management, audit, or third-party risk concepts.
• Ability to evaluate common security evidence, identify incomplete or inconsistent information, and **escalate** potential risk concerns.
• Strong attention to detail, documentation discipline, and ability to manage multiple assessment or remediation activities concurrently.
• Clear written and verbal communication skills, including the ability to summarize technical or control information for business stakeholders.
• Proficiency with Microsoft Office; experience with GRC, vendor risk, vulnerability management, ticketing, or reporting tools is preferred.
• Experience contributing to audits, regulatory compliance activities, control testing, risk assessments, or vendor due diligence reviews.
• Familiarity with frameworks and regulations such as NIST CSF, NIST 800-53, NYDFS, GLBA, SOX, SOC reporting, ISO 27001, or related standards.
• Relevant certification or progress toward CRISC, CISA, Security+, CDPSE, CTPRP, or a similar certification is a plus.

Roles & Responsibilities

• Execute assigned GRC activities, including risk documentation, control mapping, exception tracking, and assessment record maintenance.
• Support policy, standard, and procedure lifecycle activities by coordinating updates, collecting input, and validating evidence of approvals.
• Prepare materials for governance forums, risk reviews, audit discussions, and compliance reporting using established templates and data sources.
• Coordinate vendor assessment intake, due diligence requests, follow-ups, and stakeholder communications through closure.
• Review vendor questionnaires, SOC reports, ISO certifications, penetration test summaries, vulnerability information, business continuity documentation, and other due diligence artifacts for completeness and risk relevance.
• Document assessment conclusions, remediation items, missing evidence, and residual risk considerations in alignment with defined TPRM procedures.
• Support vulnerability governance activities by tracking remediation status, exception requests, risk acceptance documentation, and aging issues.
• Partner with technology and risk stakeholders to validate ownership, required evidence, and remediation progress for identified vulnerabilities or control gaps.
• Contribute to recurring metrics and reporting related to vulnerability trends, overdue remediation, exception volume, and issue closure.
• Collect, organize, and validate audit evidence in accordance with defined control objectives and regulatory expectations.
• Assist with remediation tracking for audit findings, control gaps, risk acceptances, and compliance action items.
• Maintain documentation aligned to frameworks and requirements such as NIST CSF, NIST 800-53, NYDFS, GLBA, SOX, SOC reporting, and ISO 27001.
• Maintain and enhance routine metrics for risk assessment volume, vendor status, vulnerability remediation, open issues, and documentation completeness.
• Identify opportunities to improve templates, procedures, evidence requests, stakeholder instructions, and process consistency.
• Support process improvement efforts by documenting pain points, recommending practical updates, and helping implement approved changes.

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Salary Range: $81,000-$109,500 a year

Job Details

• Location
• Branchville, NJ
• Function
• TECHNOLOGY
• Role
• Specialist
• ID
• 437001
• Skills
• Cyber Security | GRC
• Salary Range
• $81,000 - $109,500

Desired Candidate Profile

• Qualifications
• BACHELOR OF COMPUTER SCIENCE