grc specialist

AMER Technology, Inc.

<div>
 <p>
  <strong>
   Job Title: Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
  </strong>
 </p>
 <p>
  <strong>
   Client:
  </strong>
  Texas Health and Human Services Commission (HHSC)
 </p>
 <p>
  <strong>
   Location:
  </strong>
  701 W 51st Street, Austin, TX 78751
 </p>
 <p>
  <strong>
   Work Mode:
  </strong>
  100% Onsite (Local Candidates Only)
 </p>
 <p>
  <strong>
   Position Overview
  </strong>
 </p>
 <p>
  The Texas Health and Human Services Commission (HHSC) is seeking an experienced
  <strong>
   Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
  </strong>
  to support enterprise cybersecurity governance, risk management, and compliance operations.
 </p>
 <p>
  This role is responsible for ensuring that HHSC information systems remain secure, compliant, and audit-ready by supporting:
 </p>
 <ul>
  <li>
   System Security Plan (SSP) development
  </li>
  <li>
   Security Assessments (SA)
  </li>
  <li>
   Risk Assessments (RA)
  </li>
  <li>
   Authorization to Operate (ATO) support
  </li>
  <li>
   Continuous monitoring initiatives
  </li>
 </ul>
 <p>
  The analyst will collaborate closely with:
 </p>
 <ul>
  <li>
   Information Owners (IO)
  </li>
  <li>
   Information Custodians (IC)
  </li>
  <li>
   Technical &amp; Application Teams
  </li>
  <li>
   HHSC CISO Office
  </li>
 </ul>
 <p>
  All activities must align with:
 </p>
 <ul>
  <li>
   <strong>
    NIST SP 800-53
   </strong>
  </li>
  <li>
   <strong>
    NIST Risk Management Framework (RMF)
   </strong>
  </li>
  <li>
   <strong>
    DIR Security Control Standards
   </strong>
  </li>
  <li>
   HHSC cybersecurity policies
  </li>
 </ul>
 <p>
  RSA Archer serves as the system of record for all GRC activities.
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <p>
  <strong>
   System Security Planning (SSP)
  </strong>
 </p>
 <ul>
  <li>
   Develop, maintain, and update System Security Plans for HHSC systems and applications.
  </li>
  <li>
   Gather and validate control implementation evidence.
  </li>
  <li>
   Ensure documentation aligns with NIST, DIR, and HHSC CISO standards.
  </li>
  <li>
   Support lifecycle updates of SSPs for compliance and audit readiness.
  </li>
 </ul>
 <p>
 </p>
</div>


Cybersecurity Risk & Compliance Analyst

Sagar Fabrics

<p>We are seeking a skilled <b>Cybersecurity GRC Specialist</b> to lead and strengthen our Governance, Risk, and Compliance initiatives. This role focuses on managing cybersecurity risks, ensuring regulatory compliance, supporting audits, and implementing security frameworks to protect organizational information assets.</p><p><b>Key Responsibilities</b></p><ul><li>Lead and manage Governance, Risk, and Compliance (GRC) activities across the organization</li><li>Perform cybersecurity risk assessments and maintain enterprise risk registers</li><li>Develop, review, and update information security policies, standards, and procedures</li><li>Ensure compliance with frameworks and regulations such as ISO 27001, SOC 2, GDPR, PCI-DSS, and NIST</li><li>Coordinate and support internal and external security audits</li><li>Track, remediate, and report audit findings and risk treatment plans</li><li>Conduct third-party/vendor risk assessments and due diligence</li><li>Monitor compliance with regulatory, legal, and contractual security requirements</li><li>Collaborate with IT, Legal, and Business teams to implement security controls</li><li>Prepare risk reports, compliance dashboards, and management presentations</li><li>Stay updated with evolving cybersecurity threats, regulations, and best practices</li></ul><p><b>Required Skills &amp; Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field</li><li>3+ years of experience in cybersecurity GRC, risk management, or compliance</li><li>Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, SOC 2, PCI-DSS, GDPR)</li><li>Experience in conducting risk assessments and audits</li><li>Strong documentation, policy writing, and reporting skills</li><li>Understanding of IT controls, data protection, and security governance</li><li>Excellent communication and stakeholder management skills</li></ul><p><b>Preferred / Good to Have</b></p><ul><li>Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CISSP (preferred)</li><li>Hands-on experience with GRC tools (ServiceNow GRC, Archer, One Trust, etc.)</li><li>Experience in cloud security compliance (AWS, Azure, GCP)</li><li>Knowledge of data privacy laws and regulatory environments</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: ₹25,000.00 - ₹50,000.00 per month</p><p>Benefits:</p><ul><li>Provident Fund</li></ul><p>Work Location: In person</p>

Cybersecurity GRC Analyst

Pearson

<div><p>Job Title: &ndash; Lead Specialist, Information Security</p>
<p><b>Role Overview</b></p>
<p>Cybersecurity Governance, Risk &amp; Compliance function sits within the Chief Information Security Office as part of the Digital and Technology organisation that consists of a wide range of shared services reporting to the Chief Information Officer at Pearson.</p>
<p>We are seeking a Cybersecurity GRC professional with strong experience in reviewing supplier and customer contracts, supporting customer security questionnaires and contractual security clauses, and helping to scale GRC processes through automation and tooling.</p>
<p>This role sits at the intersection of cybersecurity, risk, and legal, partnering closely with Data Privacy, Legal, Technology Procurement, and Technology teams to ensure security requirements are assessed, negotiated, and managed efficiently without slowing the business.</p>
<p>A legal, compliance, or contract-focused background (formal or practical) is highly desirable.</p>
<p><b>Key Responsibilities</b></p>
<p><b>Contract Review &amp; Negotiation (Customer &amp; Supplier)</b></p>
<ul><li>Review customer and supplier contracts for cybersecurity, data protection, privacy, and risk-related clauses.</li>
<li>Assess contractual requirements against internal security controls, policies, and certifications (e.g. ISO 27001, SOC 2, Cyber Essentials).</li>
<li>Support Legal and Commercial teams during contract negotiations, advising on acceptable security positions, deviations, and risk trade-offs.</li>
<li>Identify and document non-standard security obligations and ensure appropriate risk acceptance or remediation plans are in place.</li>
<li>Maintain and improve security contract clause libraries and standard positions.</li>
<li>Support Sales, Legal, and Procurement teams by providing clear, pragmatic security positions that minimise unnecessary negotiation and friction.</li>
<li>Ensure customer security questionnaires and contract reviews are completed in a way that protects the organisation while supporting rapid deal closure.</li>
</ul><p><b>Customer Assurance &amp; Sales Enablement</b></p>
<ul><li>Respond to customer security questionnaires, due diligence requests, and contractual security queries.</li>
<li>Act as a subject matter expert for customer-facing security discussions, supporting Sales and Customer Success teams.</li>
<li>Ensure responses are accurate, consistent, scalable, and reusable.</li>
</ul><p><b>GRC Automation &amp; Tooling</b></p>
<ul><li>Help design, implement, and optimise GRC tooling and automation (e.g. contract review workflows, questionnaire automation, evidence repositories).</li>
<li>Identify opportunities to reduce manual effort through:</li>
<li>Automated questionnaire responses</li>
<li>Clause mapping and standardised positions</li>
<li>Workflow tooling and dashboards</li>
<li>Partner with Legal, Procurement, and IT to embed GRC processes into business-as-usual tooling.</li>
<li>Identify and eliminate unnecessary complexity in security requirements, documentation, and workflows.</li>
<li>Continuously improve turnaround times for:</li>
<li>Customer security reviews</li>
<li>Contractual security assessments</li>
<li>Supplier risk evaluations</li>
<li>Measure and track improvements in time-to-market and operational efficiency as part of GRC process maturity.</li>
</ul><p><b>Governance, Risk &amp; Compliance</b></p>
<ul><li>Policy Maintenance and Updating</li>
<li>Maintain and update cybersecurity policies and standards in line with the evolving threat and compliance landscape, including frameworks such as NIST.</li>
<li>Ensure all policies are current, comprehensive, and in compliance with industry standards and regulatory requirements.</li>
<li>Collaborate with stakeholders to review and implement policy changes as necessary.</li>
<li>Support the maintenance of security policies, standards, and control mappings.</li>
<li>Contribute to internal and external audits where contractual obligations are in scope.</li>
<li>Help mature the organisation&rsquo;s risk management posture.</li>
<li>Collaborate closely with leaders and teams across Digital and Technology organisation to align portfolio initiatives with the cybersecurity strategy and business objectives</li>
<li>Extend the portfolio management role to include overseeing the governance function, ensuring compliance with applicable laws, regulations, and industry standards, as well as internal policies and procedures</li>
<li>Establish and maintain strong relationships with key stakeholders, including business leaders, technology teams, and external partners, to ensure effective communication, collaboration, and support for portfolio initiatives</li>
<li>Identify and assess risks associated with portfolio initiatives, develop risk mitigation strategies, and implement appropriate controls to minimize cybersecurity-related risks</li>
</ul><p><b>Required Skills &amp; Experience</b></p>
<p><b>Essential</b></p>
<ul><li>Experience in a cybersecurity GRC, risk, compliance, or assurance role.</li>
<li>Hands-on experience reviewing or responding to security clauses in customer and/or supplier contracts.</li>
<li>Strong understanding of:</li>
<li>Information security principles</li>
<li>Third-party risk</li>
<li>Experience responding to customer security questionnaires (e.g. SIG, CAIQ, bespoke).</li>
<li>Ability to clearly communicate risk to data privacy, legal, commercial, and non-technical stakeholders.</li>
<li>Strong written skills with attention to detail.</li>
</ul><p><b>Desirable</b></p>
<ul><li>Legal, contracts, or compliance background (e.g. law degree, paralegal experience, in-house legal exposure, or equivalent practical experience).</li>
<li>Experience working closely with Legal, Procurement, or Commercial teams.</li>
<li>Familiarity with security frameworks and certifications (ISO 27001, SOC 2, NIST, Cyber Essentials).</li>
<li>Experience implementing or improving GRC tooling or automation (e.g. IronClad, GRC tools).</li>
<li>Experience in SaaS, technology, or regulated environments.</li>
</ul><p><b>What Success Looks Like</b></p>
<ul><li>Faster, more consistent responses to customer security and contract requests.</li>
<li>Reduced friction between Sales, Legal, and Security.</li>
<li>Clear, repeatable contract security positions with documented risk decisions.</li>
<li>Scalable GRC processes enabled by automation and tooling.</li>
<li>Improved visibility of contractual security obligations and associated risks.</li>
<li>Security and contract reviews that enable faster sales cycles and supplier onboarding.</li>
<li>Clear, simple, and repeatable security positions that reduce back-and-forth with customers.</li>
<li>Measurable reductions in response times for customer security questionnaires and contract reviews.</li>
<li>GRC processes that are seen internally as enablers of the business, not blockers.</li>
</ul><p><b>Why Join Us</b></p>
<ul><li>Opportunity to shape and scale a modern, automation-first GRC function.</li>
<li>High exposure widely across Pearson including across Data Privacy, Legal, Sales, Procurement, and Technology.</li>
<li>Real influence on how the business manages contractual cybersecurity risk.</li>
<li>Supportive environment for professional development</li>
</ul><p><b>Who we are:</b></p>
<p>At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson.</p>
<p>Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.</p>
<p>If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing TalentExperienceGlobalTeam@grp.pearson.com.</p>
<p><b>Job:</b> Security</p>
<p><b>Job Family:</b> TECHNOLOGY</p>
<p><b>Organization:</b> Corporate Strategy &amp; Technology</p>
<p><b>Schedule:</b> FULL\_TIME</p>
<p><b>Workplace Type:</b> Hybrid</p>
<p><b>Req ID:</b> 22519</p></div><p></p>

Lead Specialist, Information Security

هيئة التأمين | Insurance Authority

<div>
 <p>
  <strong>
   Overview:
  </strong>
 </p>
 <p>
  This role is conducted within the vision, mission, and strategic plan of the Insurance Authority The Governance preserves the integrity of cybersecurity charters, policies, and risk records, keeping them current, traceable, and audit-ready Reporting to the Manager of Governance, this role will administer end-to-end governance workflows&mdash;capturing stakeholder input, tracking compliance obligations, and escalating overdue actions&mdash;to maintain alignment with regulatory mandates The position converts governance data into concise dashboards and briefs that inform leadership decisions, support external attestations, and promote a culture of disciplined risk management across the Division Rigorously maintaining evidence libraries and risk registers, the Specialist enables timely, transparent engagement with auditors, regulators, and key third-party partners.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities and Tasks:
  </strong>
 </p>
 <ul>
  <li>
   Execute the regular update, version control, and archival of cybersecurity charters, standards, and procedures in the central GRC repository.
  </li>
  <li>
   Maintain an accurate evidence library for internal and external audits, ensuring artefacts are catalogued in accordance with the Authority&rsquo;s taxonomy and retention schedule.
  </li>
  <li>
   Prepare initial drafts of governance reports, dashboards, and management briefs, validating completeness before escalation to the Manager of Governance.
  </li>
  <li>
   Administer the end-to-end policy review calendar, tracking due dates, obtaining stakeholder feedback, and logging approvals in the governance workflow tool.
  </li>
  <li>
   Publish newly endorsed policies across authorized communication channels and confirm user accessibility, liaising with Digital Workplace and IT Service Desk teams as required.
  </li>
  <li>
   Populate and maintain the compliance obligations register, recording control-test results, remediation actions, and target closure dates.
  </li>
  <li>
   Follow up on open findings with control owners, documenting status updates and escalating overdue actions to the Manager of Governance for intervention.
  </li>
  <li>
   Enter new risk entries, update risk attributes, and attach supporting evidence in the enterprise GRC platform under the direction of risk owners.
  </li>
  <li>
   Generate periodic risk-heat maps and exception logs, verifying data integrity before circulating to the Governance team for review.
  </li>
  <li>
   Assist in coordinating governance awareness sessions by scheduling logistics, preparing participant materials, and collecting attendance records.
  </li>
  <li>
   Support post-incident lessons-learned reviews by compiling documentation packs, capturing meeting minutes, and distributing action items to responsible teams.
  </li>
  <li>
   Perform other job duties as assigned.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job requirements:
  </strong>
 </p>
 <p>
  <strong>
   Educational Qualifications (required)
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s Degree in Governance, Business Administration, Law, Finance or a related field
  </li>
  <li>
   Master&rsquo;s degree preferred
  </li>
 </ul>
 <p>
  <strong>
   Certifications (required)
  </strong>
 </p>
 <ul>
  <li>
   Relevant professional certification (e.g., GRCP, GRCA, CRMP) is required
  </li>
 </ul>
 <p>
  <strong>
   Experience
  </strong>
 </p>
 <ul>
  <li>
   A Bachelor&rsquo;s degree is required
  </li>
 </ul>
 <p>
  <strong>
   Language
  </strong>
 </p>
 <p>
  (A1-A2: Basic, B1-B2: Intermediate, C1-C2: Fluent)
 </p>
 <ul>
  <li>
   English (C1), Arabic (C2)
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Competencies required:
  </strong>
 </p>
 <p>
  <strong>
   Core competencies
  </strong>
 </p>
 <ul>
  <li>
   Ethics &amp; Integrity (Beginner)
  </li>
  <li>
   Effective Communication (Beginner)
  </li>
  <li>
   Collaboration &amp; Horizontality (Beginner)
  </li>
  <li>
   Personal Competence (Beginner)
  </li>
  <li>
   Analysis and Problem Solving (Beginner)
  </li>
 </ul>
 <p>
  <strong>
   Technical competencies
  </strong>
 </p>
 <ul>
  <li>
   Corporate Governance (Beginner)
  </li>
  <li>
   Delegation of Authority (Beginner)
  </li>
  <li>
   Board Support Governance (Beginner)
  </li>
  <li>
   Governance Policy Management (Beginner)
  </li>
  <li>
   Governance Maturity Evaluation (Beginner)
  </li>
 </ul>
 <p>
 </p>
</div>


Tamheer Opportunity - Specialist of Governance

SleekFocus

<p>We&rsquo;re Hiring: Package Specialist &ndash; SAP Application Security</p><p>Client: IBM</p><p>Locations: Bangalore | Pune | Chennai | Mumbai</p><p>Work Mode: On-site | Contract or Full-Time</p><p>Salary: ₹8&ndash;10 LPA</p><p>Duration: 12 Months</p><p>Required Skills</p><ul><li>SAP Security</li><li>GRC</li><li>HANA</li></ul><p>Must Have</p><p>* 3+ years experience</p><p>* At least 1 implementation in any of the following:</p><p>&ndash; SAP Security with CFIN</p><p>&ndash; SAP Security with GRC</p><p>&ndash; SAP Security S/4 Consultant</p><p>&ndash; SAP Security with IDM</p><p>&ndash; SAP Security Analyst</p><p>&ndash; SAP Security SF Consultant</p><p>&ndash; SAP Security HR Payroll</p><p>Eligibility: Bachelor&rsquo;s Degree</p><p>Last Date to Apply: 24 Feb 2026</p><p>Job Types: Full-time, Contractual / Temporary<br/>Contract length: 12 months</p><p>Pay: ₹800,000.00 - ₹1,000,000.00 per year</p><p>Benefits:</p><ul><li>Paid sick time</li><li>Provident Fund</li></ul><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>SAP Security: 3 years (Required)</li><li>GRC: 3 years (Required)</li><li>Hana: 3 years (Required)</li></ul><p>Work Location: In person</p>

Package Specialist-SAP Application Security

Giza Systems EG

<div><h4 class="jobSectionHeader"><b>Job Description</b></h4>
<p></p><div><ul><li>Responsible for developing, implementing, and overseeing the organization&rsquo;s risk management and business continuity frameworks. This role ensures the identification, assessment, and mitigation of risks while maintaining a robust business continuity strategy to safeguard operations against potential disruptions</li>
<li>Risk Management &amp; Reporting:</li>
<li>Implement the organization&rsquo;s risk management framework, ensuring policies and procedures are adhered to across all departments.</li>
<li>Facilitate risk identification workshops to assess strategic, operational, and financial risks, updating Giza Systems Risk Register accordingly.</li>
<li>Support Bid Management &amp; Projects: actively participate in risk assessments for new bids and major projects to ensure accurate risk pricing and mitigation strategies are in place before contractual commitment.</li>
<li>Updating risk reports and dashboards for Senior Management review, highlighting Key Risk Indicators (KRIs) and emerging trends.</li>
<li>Monitor the implementation and effectiveness of risk mitigation plans and follow up with risk owners to ensure actions are closed on time.</li>
<li>Execute anti-fraud and anti-corruption risk assessments and monitor the effectiveness of internal controls.</li>
<li>Business Continuity (BCM):</li>
<li>Maintain the Business Continuity Management (BCM) program, ensuring alignment with the approved strategy and framework.</li>
<li>Conduct and Update the Business Impact Analysis (BIA) to accurately define critical activities, Recovery Time Objectives (RTO), and Recovery Point Objectives (RPO).</li>
<li>Develop &amp; Maintain Departmental Plans: Work closely with department heads to draft and update specific Business Continuity Plans (BCPs) for their functions.</li>
<li>Plan and Execute BCP and Disaster Recovery (DR) drills/testing to validate the effectiveness of recovery strategies and employee readiness.</li>
<li>Coordinate with IT/Tech Risk and Operations to ensure disaster recovery plans for critical infrastructure align with the RTOs defined in the BIA.</li>
<li>Conduct post-incident reviews to identify root causes and recommend improvements to response strategies.</li>
<li>General:</li>
<li>Act as a focal point for Solutions team, external auditors and regulators regarding risk, internal control and BCP inquiries, preparing necessary documentation and evidence.</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Personal Skills</b></h4>
<p></p><div><ul><li>Excellent analytical, problem-solving, and decision-making skills.</li>
<li>Excellent communication and interpersonal skills, with the ability to collaborate effectively with internal and external stakeholders.</li>
<li>Strong leadership skills, with the ability to manage and motivate a team of professionals.</li>
<li>Ability to work independently in a fast-paced environment and handle multiple complex &amp; confidential tasks.</li>
<li>Strong stakeholder management and communication abilities.</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Technical Skills</b></h4><br>
<p></p><div><div><br>
<ul><li>Bachelor&rsquo;s degree in business administration, Finance, or a related field.
</li><li>12+ years of experience, 7+ years in a relevant field.
</li></ul>
- Professional certifications such as Certified Risk Manager (CRM), Certified Internal Auditor (CIA) - Preferred
<br>
<ul><li>Certified Business Continuity Professional (CBCP), ISO 31000, or similar are preferred.
</li><li>Strong knowledge of risk management frameworks (ISO 31000, COSO), business continuity standards (ISO 22301), and crisis management protocols.
</li><li>Experience in conducting risk assessments, scenario analyses, and business impact analyses (BIA).
</li><li>Foster a culture of ethical behavior, accountability, and continuous improvement.</li></ul></div></div><br>
<p></p>
<h4 class="jobSectionHeader"><b>Education</b></h4>
<div><p>Bachelor&rsquo;s degree in business administration, Finance, or a related field.</p></div></div><p></p>
<br><div><h4 class="jobSectionHeader"><b>Job Details</b></h4>
<div><div>Job Location</div>
<div>Cairo, Egypt</div>
</div><div><div>Company Industry</div>
<div>System Integrator</div>
</div><div><div>Company Type</div>
<div>Employer (Private Sector)</div>
</div><div><div>Job Role</div>
<div>Other</div>
</div><div><div>Job Division</div>
<div>GRC</div></div></div>
<br><div><h4 class="jobSectionHeader"><b>Preferred Candidate</b></h4>
<div><div>Career Level</div>
<div>Mid Career</div>
</div><div><div>Years of Experience</div>
<div>Min: 12 Max: 14</div>
</div><div><div>Degree</div>
<div>Bachelor's degree</div></div></div>

Risk and Business Continuity Expert

Search 4898+ Grc specialist jobs near you this March. New roles added regularly across leading industries. Apply today.

4898 grc specialist jobs Near Me

Cybersecurity Risk & Compliance Analyst

Cybersecurity GRC Analyst

Lead Specialist, Information Security

Lead Specialist, Information Security

Tamheer Opportunity - Specialist of Governance

Package Specialist-SAP Application Security

Risk and Business Continuity Expert