GRC Specialist: Governance, Risk & Compliance

360CyberX; United States; On-site; USD 70,000 - 90,000; Full time

Job summary

A cybersecurity firm is seeking a GRC Specialist responsible for managing governance, risk management, and compliance programs. The role involves conducting risk assessments, supporting audit preparations, and collaborating with various stakeholders. Ideal candidates have a Bachelor's degree in a related field and relevant certifications such as CGRC or CISA. Strong analytical and documentation skills are necessary to bridge technical and regulatory requirements effectively. This position is crucial for ensuring compliance and reducing organizational risks.

Qualifications

• Strong understanding of risk management and compliance principles.
• Hands-on experience with risk assessments and compliance reviews.
• Familiarity with NIST, ISO, and regulatory requirements.

Responsibilities

• Support governance, risk, and compliance programs.
• Conduct risk assessments and compliance audits.
• Prepare reports and metrics for risk posture.

Skills

Risk assessments

Compliance reviews

Governance principles

Analytical skills

Documentation skills

Collaboration

Education

Bachelor’s degree in Cybersecurity, IT, or Risk Management

Tools

NIST CSF/RMF

ISO 27001

CIS Controls

SOC 2

Job description

A cybersecurity firm is seeking a GRC Specialist responsible for managing governance, risk management, and compliance programs. The role involves conducting risk assessments, supporting audit preparations, and collaborating with various stakeholders. Ideal candidates have a Bachelor's degree in a related field and relevant certifications such as CGRC or CISA. Strong analytical and documentation skills are necessary to bridge technical and regulatory requirements effectively. This position is crucial for ensuring compliance and reducing organizational risks.