Strategic GRC & Security Specialist II

SCIGON; Salt Lake City (UT); On-site; USD 116,000 - 144,000; Full time

Job summary

SCIGON is seeking a Security GRC Specialist II in Salt Lake City to lead core GRC programs and act as a security SME. The role blends strategic oversight with hands-on execution, partnering with technical teams, stakeholders, and vendors to ensure controls, policies, and risk practices are effective and clearly communicated.

You will drive third-party assessments, policy governance, and risk assurance while supporting GRC platforms and security awareness initiatives.

Qualifications

• Bachelor's degree in IT Security or equivalent with five years of experience.
• Four or more years of Information Security experience, hands-on preferred.
• CISSP, CISA, CISM or equivalent certifications preferred.
• Strong knowledge of ISO 27001, NIST, SOC, SIG frameworks.
• Experience in AI governance, security and risk management.
• Clear technical writing and communication skills.
• Experience leading risk assessments and vendor security reviews.
• Familiarity with GRC platforms and RBAC.
• Strong analytical and organizational abilities.
• Working knowledge of authentication, encryption, firewalls, SIEM, vulnerability management.

Responsibilities

• Lead security assessments and audits, document evidence and perform risk assessments as needed.
• Create, maintain, and evolve security policies, standards, guidelines, and documentation.
• Manage IT security risk and compliance assurance processes across systems.
• Serve as an Information Security SME to advise stakeholders across the organization.
• Oversee third-party Security Vendor Risk Management program and remediation tracking.
• Manage security exception requests and advise on risk treatment decisions.
• Oversee Security Awareness program roadmap, training evaluation and effectiveness.
• Support and optimize GRC technology platforms and workflows.
• Conduct evaluations to ensure IT programs align with security standards.

Skills

Third-Party Assessments

Policy & Standards Management

Risk & Compliance Assurance

Security Consulting & SME Support

Vendor Risk Management

Exception & Risk Treatment

Security Awareness Program

GRC Platform Administration

Controls & Compliance Evaluations

Education

Bachelor's degree or equivalent with five years of work experience in IT Security

Job description

SCIGON is seeking a Security GRC Specialist II in Salt Lake City to lead core GRC programs and act as a security SME. The role blends strategic oversight with hands-on execution, partnering with technical teams, stakeholders, and vendors to ensure controls, policies, and risk practices are effective and clearly communicated.

You will drive third-party assessments, policy governance, and risk assurance while supporting GRC platforms and security awareness initiatives.