GRC & Third-Party Risk Specialist

Selective Insurance; Short Hills (NJ); On-site; USD 116,000 - 157,000; Full time

Benefits offered by this job

Competitive base salary

Incentive plan eligibility

Health care plans

Retirement savings plan

Employee Stock Purchase Program

Tuition assistance

20 days paid time off

Job summary

Selective Insurance seeks a GRC Specialist to advance governance, risk, and compliance activities across cybersecurity, vendor risk, and audit domains. You will perform assessments, analyze evidence, coordinate remediation, and report findings to stakeholders in a regulated environment.

The role emphasizes risk-based decision making, collaboration with technology and risk teams, and maintaining documentation aligned with NIST, GLBA, SOX, and ISO 27001. Location: New Jersey; salary range provided.

Qualifications

• Working understanding of cybersecurity, risk management, compliance, vulnerability management, audit, or third-party risk concepts.
• Ability to evaluate common security evidence, identify incomplete information, and escalate potential risk concerns.
• Strong attention to detail, documentation discipline, and ability to manage multiple assessment/remediation activities concurrently.
• Clear written and verbal communication skills for business stakeholders.
• Proficiency with Microsoft Office; experience with GRC, vendor risk, vulnerability management, ticketing, or reporting tools is preferred.

Responsibilities

• GRC Program Execution: execute risk documentation, control mapping, exception tracking, and assessment record maintenance.
• Policy lifecycle: assist updates, collect input, validate evidence of approvals.
• Governance reporting: prepare materials for governance forums, risk reviews, audit discussions, and compliance reporting.

Skills

Cybersecurity

Risk management

Compliance

Vulnerability management

Audit

Third-party risk

Job description

Selective Insurance seeks a GRC Specialist to advance governance, risk, and compliance activities across cybersecurity, vendor risk, and audit domains. You will perform assessments, analyze evidence, coordinate remediation, and report findings to stakeholders in a regulated environment.

The role emphasizes risk-based decision making, collaboration with technology and risk teams, and maintaining documentation aligned with NIST, GLBA, SOX, and ISO 27001. Location: New Jersey; salary range provided.