Senior IT GRC & Vendor Contract Manager

SpikeIT Global Solutions, Inc.; Trenton (AL); Hybrid; USD 120.000 - 170.000; Vollzeit

Zusammenfassung

SpikeIT Global Solutions, Inc. is seeking an experienced Senior IT GRC & Vendor Contract Manager to lead governance, risk, and compliance initiatives. Hybrid role in Trenton, NJ, with three days onsite and two days remote, focusing on ITGC, third-party risk, and contract compliance.

You will manage SOC 1/SOC 2 audit activities, align with NIST and ISO 27001 standards, and report to CIO-level stakeholders. Strong communication and risk management skills are essential for enterprise vendor risk

Qualifikationen

• Experience with ITGC, SOC 1/SOC 2 audits, risk assessments.
• Proficiency in regulatory frameworks such as NIST SP 800-53.
• Knowledge of ISO 27001 and IT security policies.
• Experience with vendor contract compliance, SLAs, and audit clauses.
• Strong stakeholder communication and reporting skills.
• Preferred: CIO-level reporting experience and enterprise vendor risk management.

Aufgaben

• Manage IT compliance, third-party risk, and audit governance.
• Oversee vendor contract compliance, SLAs, and audit clauses.
• Lead ITGC and SOC 1/SOC 2 audit remediation.
• Provide reporting and updates to CIO-level stakeholders.

Kenntnisse

IT Governance, Risk & Compliance

ITGC

Third-Party Risk Management

SOC 1/SOC 2 audits

NIST Frameworks

ISO 27001

Vendor contract compliance

Stakeholder communication

Jobbeschreibung

Company Description

Job Description

Job Title: Senior IT GRC & Vendor Contract Manager
Location: Trenton, New Jersey | Hybrid (3 days onsite, 2 days remote)

Job Description:
Seeking an experienced IT Governance, Risk & Compliance (GRC) professional to manage IT compliance, third-party risk, audit governance, and vendor contract compliance. The ideal candidate will have strong experience with ITGC, SOC 1/SOC 2 audits, risk assessments, and regulatory frameworks.

Required Skills:

• IT Governance, Risk & Compliance (GRC) and ITGC

• Third-Party Risk Management (TPRM)

• SOC 1/SOC 2 report reviews and audit remediation

• NIST Cybersecurity Framework / NIST SP 800-53

• ISO 27001 and IT security policies

• Vendor contract compliance, SLAs, and audit clauses

• Strong stakeholder communication and reporting skills

Preferred: Experience supporting CIO-level reporting and managing vendor risk in an enterprise environment.

Additional Information

All your information will be kept confidential according to EEO guidelines.