Senior IT GRC & Vendor Contract Manager

SpikeIT Global Solutions, Inc.; Trenton (NJ); Presencial; USD 90 000 - 150 000; Tempo integral

Resumo da oferta

SpikeIT Global Solutions, Inc. is seeking an experienced IT Governance, Risk & Compliance (GRC) professional to manage IT compliance, third-party risk, audit governance, and vendor contract compliance.

The ideal candidate will have strong experience with ITGC, SOC 1/SOC 2 audits, risk assessments, and regulatory frameworks such as NIST CSF / NIST SP 800-53 and ISO 27001. You will lead stakeholder reporting and coordinate remediation with vendors to maintain security standards and regulatory

Qualificações

• Experience in IT Governance, Risk & Compliance (GRC) and ITGC.
• Experience with third-party risk management and vendor risk.
• Proficiency in SOC 1/SOC 2 audits and remediation.
• Familiarity with NIST CSF / NIST SP 800-53 and ISO 27001.

Responsabilidades

• Manage IT compliance, risk assessments, and audit governance.
• Oversee third-party risk management and vendor contract compliance.
• Review SOC 1/SOC 2 reports and coordinate remediation actions.
• Provide stakeholder reporting and dashboards for executives.

Conhecimentos

IT GRC

Third-Party Risk

SOC 1/SOC 2 Audits

NIST CSF / 800-53

ISO 27001

Vendor Contract Compliance

Stakeholder Reporting

Descrição da oferta de emprego

Job Description

Seeking an experienced IT Governance, Risk & Compliance (GRC) professional to manage IT compliance, third-party risk, audit governance, and vendor contract compliance. The ideal candidate will have strong experience with ITGC, SOC 1/SOC 2 audits, risk assessments, and regulatory frameworks.

Required Skills

• IT Governance, Risk & Compliance (GRC) and ITGC
• Third-Party Risk Management (TPRM)
• SOC 1/SOC 2 report reviews and audit remediation
• NIST Cybersecurity Framework / NIST SP 800-53
• ISO 27001 and IT security policies
• Vendor contract compliance, SLAs, and audit clauses
• Strong stakeholder communication and reporting skills

Preferred

Experience supporting CIO-level reporting and managing vendor risk in an enterprise environment.

Additional Information

All your information will be kept confidential according to EEO guidelines.