GRC Specialist: IT/OT Risk & Compliance

Lumaenergy; San Juan (PR); In loco; USD 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Lumaenergy seeks an IT risk and compliance specialist to execute IT/OT security assessments, maintain the risk register, and coordinate third‑party audits across IT and OT environments.

You will apply NIST CSF, CIS v8, NERC CIP, and related standards to identify control gaps, drive remediation, and produce data‑driven reports for leadership decision‑making. This role supports vendor due diligence and training across teams.

Competenze

• 5 years of related experience in information security governance, risk management, compliance, or audit functions.
• Experience executing audit plans, maintaining risk registers, and supporting compliance programs.
• Experience with cybersecurity frameworks such as NIST CSF, CIS Controls, NERC CIP, or equivalent.
• Experience with evidence repositories, compliance dashboards, and GRC tools.

Mansioni

• Executes IT/OT security risk assessments and compliance reviews aligned with LUMA Cybersecurity Controls (LCC) program.
• Maintains and updates the risk register and issue tracker with timely documentation and escalation of risks.
• Supports IT audit activities by assessing compliance with information security policies and IAM.
• Conducts regulatory compliance assessments against NIST CSF, CIS v8, NERC CIP, CFAA, and other standards.
• Monitors tech projects to validate secure-by-design principles in IT/OT environments.
• Supports incident response through review of data protection controls and user access.
• Prepares monthly and quarterly compliance and audit reports with risk trends and remediation status.
• Integrates cybersecurity requirements into vendor contracts and onboarding processes.
• Delivers cybersecurity awareness and training across IT/OT teams.
• Follows policies to ensure compliance and participates in storm restoration drills.
• Performs additional tasks aligned with role expectations.

Conoscenze

Governance

Risk management

Compliance

Audit planning

Formazione

Bachelor's degree in IT/CS/Engineering

Associate's degree + 8 years info security governance experience

Strumenti

GRC tools

Descrizione del lavoro

Lumaenergy seeks an IT risk and compliance specialist to execute IT/OT security assessments, maintain the risk register, and coordinate third‑party audits across IT and OT environments.

You will apply NIST CSF, CIS v8, NERC CIP, and related standards to identify control gaps, drive remediation, and produce data‑driven reports for leadership decision‑making. This role supports vendor due diligence and training across teams.