grc specialist

Arab Solutions

<div>
 <strong>
  Job Title:
 </strong>
 GRC Specialist
 <br/>
 <br/>
 <strong>
  Job Descriptions
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Monitor status of risks, and reports status and need for action to senior colleagues.
  </li>
  <li>
   Demonstrate financial awareness as a part of risk management (e.g., cost-effectiveness analysis of proposed counter measures).
  </li>
  <li>
   Assist with development of agreed countermeasures and contingency plans.
  </li>
  <li>
   Collect and collate evidence as part of formally conducted and planned reviews of activities, processes, products, or services, including information and communications technology applications.
  </li>
  <li>
   Examine records as part of specified testing strategies for evidence of compliance with management directives, or the identification of abnormal occurrences.
  </li>
  <li>
   Compare records with expectations arising from the procedures, requirements and/or standards governing the work.
  </li>
  <li>
   Analyze evidence collated and draft&rsquo;s part, or all formal reports commenting on the conformance found to exist in the reviewed part of an information systems environment.
  </li>
  <li>
   Contribute to the collection of evidence and the conduct of formal audits or reviews of activities, processes, data, products, or services.
  </li>
  <li>
   Examine records for evidence that appropriate testing and other quality control activities have taken place and determines compliance with organizational directives, standards and procedures. Inputs findings to compliance reports.
  </li>
  <li>
   Identify non-compliances, non-conformances and abnormal occurrences, and inputs findings to compliance reports.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Mandatory Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Minimum bachelor&rsquo;s degree level or holds a relevant professional qualification or relevant experience (typically at least 6 years) in a techno management ITSM service management role with widespread knowledge of IT.
  </li>
  <li>
   Educated to bachelor&rsquo;s degree level, holds a relevant professional qualification, and may have a postgraduate qualification such as an MSc, MBA, or other appropriate business, engineering, scientific or industry qualification.
  </li>
  <li>
   Have knowledge and experience as below:
  </li>
  <li>
   a. Applying specific quality standards to all tasks undertaken to ensure that deliverables areaccurate and complete.
  </li>
  <li>
   b. Principles, practices, tools, and techniques of IT auditing.
  </li>
  <li>
   c. Methods and techniques for reporting progress and financial conformance against an agreed plan.
  </li>
  <li>
   Have technical and business skills as below:
  </li>
  <li>
   a. Communicate well, both orally and in writing, and has the skill to influence through persuasion in a formal context.
  </li>
  <li>
   Has a good overall knowledge of wide areas of information systems practice and applications. Understands the need to maintain a practical and pragmatic approach to standards compliance
  </li>
  <li>
   b. Applying standards, practices, codes, and assessment and certification programs relevant to the IT industry and the specific organization or business domain.
  </li>
  <li>
   c. The system or method for the management of quality within the employing organization&rsquo;s IT practices, including quality planning, assurance, and control.
   <br/>
   <br/>
  </li>
 </ul>
 Skills: service management,reporting progress,techniques,principles,financial conformance,itsm,it auditing,it,standards,tools,practices
</div>


GRC Specialist

Stellar Hunters

<div><h4 class="jobSectionHeader"><b>Job Summary</b></h4>
<p>
We are seeking a Cyber GRC Specialist to support and advance the company&rsquo;s cybersecurity governance, risk management, and compliance (GRC) initiatives. The successful candidate will collaborate with Security, IT, Legal, Privacy, Compliance, and business teams to identify and manage cyber risk, implement controls, maintain compliance with applicable frameworks and regulations, and support continuous improvement of the security posture. This role requires a pragmatic, consultative approach and the ability to translate technical security concepts into business risk terms.</p>
<h4 class="jobSectionHeader"><b>Key Responsibilities</b></h4>
<h5 class="jobSectionHeader"><b>Governance &amp; Policy</b></h5>
<ul>
<li><p>Develop, maintain, and operationalize cybersecurity policies, standards, and procedures aligned with industry frameworks and regulatory requirements (e.g., NIST CSF, ISO 27001, SOC 2, PCI, relevant regional regulations).</p></li>
<li><p>Support security governance forums and reporting to senior leadership and stakeholders on cyber risk, control effectiveness, and remediation progress.</p></li>
<li><p>Collaborate with cross-functional teams to ensure security requirements are integrated into business processes, projects, and third-party relationships.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Risk Management &amp; Assessments</b></h5>
<ul>
<li><p>Conduct and coordinate risk assessments, control gap analyses, and threat/risk modeling for systems, applications, and third-party services.</p></li>
<li><p>Maintain the risk register, prioritize remediation activities, and track closure of identified vulnerabilities and control deficiencies.</p></li>
<li><p>Perform vendor security and risk assessments; review third-party contracts and recommend appropriate security controls and contractual language.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Compliance &amp; Audit Support</b></h5>
<ul>
<li><p>Support internal and external compliance initiatives, audits, and certifications (e.g., SOC 2, ISO 27001), including evidence collection, control testing, and remediation coordination.</p></li>
<li><p>Monitor regulatory and industry compliance requirements and translate obligations into practical control and process requirements across the organization.</p></li>
<li><p>Prepare and maintain documentation, control narratives, and artifacts required for assessments and regulatory inquiries.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Incident Response &amp; Continuous Improvement</b></h5>
<ul>
<li><p>Participate in incident response planning and post-incident reviews; advise on control improvements and regulatory/contractual notification considerations.</p></li>
<li><p>Collaborate with Security Operations and IT teams to ensure controls are effectively implemented, monitored, and improved based on lessons learned and evolving threats.</p></li>
<li><p>Identify opportunities to automate control monitoring, reporting, and GRC workflows using GRC platforms and security tooling.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Training, Awareness &amp; Advisory</b></h5>
<ul>
<li><p>Develop and deliver role-based security awareness, GRC guidance, and targeted training for employees, contractors, and business partners.</p></li>
<li><p>Provide practical, risk-based advisory to Product, Engineering, IT, and business teams on secure design, control selection, and compliance requirements.</p></li>
<li><p>Act as a trusted advisor for security and compliance questions related to new projects, cloud deployments, and third-party integrations.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Required Qualifications - Skills &amp; Experience</b></h4>
<ul>
<li><p>Bachelor&rsquo;s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field, or equivalent practical experience.</p></li>
<li><p>3+ years of demonstrated experience in cybersecurity GRC, risk management, compliance, or related roles within a commercial or regulated environment.</p></li>
<li><p>Familiarity with common cybersecurity frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and practical experience applying them.</p></li>
<li><p>Experience performing risk assessments, vendor/security assessments, control gap analysis, and supporting audits or certifications.</p></li>
<li><p>Working knowledge of cloud security concepts (AWS, Azure, GCP), identity and access management, and common security controls.</p></li>
<li><p>Strong written and verbal communication skills with the ability to document controls, prepare executive reports, and communicate with technical and non-technical stakeholders.</p></li>
<li><p>Experience with GRC platforms, ticketing systems, and security assessment tools; comfortable working in cross-functional, fast-paced environments.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Preferred Qualifications</b></h4>
<ul>
<li><p>Relevant certifications such as CISSP, CISM, CRISC, CGEIT, or certification in GRC platforms preferred.</p></li>
<li><p>Experience supporting SOC 2, ISO 27001, or other compliance programs and working with external auditors.</p></li>
<li><p>Prior exposure to privacy requirements and data protection interactions with cybersecurity controls is a plus.</p></li>
<li><p>Experience in cloud-native environments, DevSecOps practices, and automation of control monitoring is advantageous.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Work Environment &amp; Compensation</b></h4>
<ul>
<li><p>Full-time role with a hybrid onsite/remote work model; occasional travel may be required for stakeholder meetings, audits, or vendor engagements.</p></li>
<li><p>Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</p></li>
<li><p>Opportunities for professional development, certification support, and career progression within Security, Compliance, and Risk functions.</p></li>
<li><p>Inclusive and respectful workplace culture that values diversity, equity, and work-life balance.</p></li></ul></div>

Cyber GRC Specialist

SFAI Qatar

<p>1) Monitor status of risks, and reports status and need for action to senior colleagues.</p><p>2) Demonstrate financial awareness as a part of risk management (e.g., cost-effectiveness analysis of proposed counter measures).</p><p>3) Assist with development of agreed countermeasures and contingency plans.</p><p>4) Collect and collate evidence as part of formally conducted and planned reviews of activities, processes, products, or services, including information and communications technology applications.</p><p>5) Examine records as part of specified testing strategies for evidence of compliance with management directives, or the identification of abnormal occurrences.</p><p>6) Compare records with expectations arising from the procedures, requirements and/or standards governing the work.</p><p>7) Analyze evidence collated and draft&rsquo;s part, or all formal reports commenting on the conformance found to exist in the reviewed part of an information systems environment.</p><p>8) Contribute to the collection of evidence and the conduct of formal audits or reviews of activities,processes, data, products, or services.</p><p>9) Examine records for evidence that appropriate testing and other quality control activities have taken place and determines compliance with organizational directives, standards and procedures. Inputs findings to compliance reports.</p><p>10) Identify non-compliances, non-conformances and abnormal occurrences, and inputs findings to compliance reports.</p><p>Minimum bachelor&rsquo;s degree level or holds a relevant professional qualification or relevant experience (typically at least 6 years) in a techno management ITSM service management role with widespread knowledge of IT.</p><p>2) Educated to bachelor&rsquo;s degree level, holds a relevant professional qualification, and may have a postgraduate qualification such as an MSc, MBA, or other appropriate business, engineering, scientific or industry qualification.</p><p>3) Have knowledge and experience as below:</p><p>a. Applying specific quality standards to all tasks undertaken to ensure that deliverables are accurate and complete.</p><p>b. Principles, practices, tools, and techniques of IT auditing.</p><p>c. Methods and techniques for reporting progress and financial conformance against an agreed plan.</p><p>Pay: QAR25,500.00 - QAR27,500.00 per hour</p><p>Experience:</p><ul><li> techno  management ITSM service management role: 6 years (Preferred)</li></ul><p>Language:</p><ul><li>English (Preferred)</li></ul><p>License/Certification:</p><ul><li>QID (Preferred)</li></ul><p>Work Location: In person</p>

IT GRC Specialist

Global Software Resources

<p><div><div><div><div><b>Job Title: IT Audit And </b><b>Compliance Project Specialist</b>
<br>
<b>Location: </b>Oakland<b>, </b>CA<br>
<b>Duration: </b>May 04, 2026<b> </b>&ndash; November 03, 2026,
<br>
<b>ONLY W2 Candidate</b></div>
</div><br>
</div></div><div><div><div><div><b>Account Manager Notes: </b>Hybrid Onsite Requirement: 1-2 days onsite depending on need for that week</div>
</div><br>
</div></div><div><div><div><div><b>Job Description:
</b><br>
<b>Role Overview</b><br>
<br>
The IT Compliance Project Specialist acts as a compliance and governance partner across the IT project portfolio. This role ensures that IT initiatives are planned, designed, and delivered in compliance with applicable regulations, company policies, and compliance standards.<br>
<br>
Working closely with the Compliance Lead, the Specialist provides analysis, documentation, and due diligence to support risk-based decision-making and to maintain compliance throughout the full project lifecycle.<br>
<br>
<b>Key Responsibilities</b><br>
<br>
Project Advisory &amp; Engagement
<ul><li>Serve as a dedicated compliance advisor to project managers and delivery teams.</li>
<li>Identify regulatory, policy, and control requirements early in the project lifecycle and ensure they are embedded into technical designs and project plans.</li>
</ul>Gate Review &amp; Approval Support
<ul><li>Participate in project phase-gate reviews to assess compliance readiness.</li>
<li>Review project artifacts and provide formal recommendations to the Compliance Lead to support approval, conditional approval, or remediation decisions.</li>
</ul>Compliance Lead Support
<ul><li>Function as the primary support resource for the Compliance Lead.</li>
<li>Assist with executive reporting, remediation tracking, and escalation of project-level compliance risks.</li>
</ul>Regulatory &amp; Framework Alignment
<ul><li>Ensure project alignment with applicable regulations and frameworks, including SOX, CCPA, ISO 55001, and internal company standards.</li>
<li>Map project controls and artifacts to regulatory requirements to support a consistent and defensible compliance posture.</li>
</ul><b>Qualifications</b><br>
Experience
<ul><li>5+ years of experience in IT Compliance, IT Audit, or Governance, Risk &amp; Compliance (GRC), preferably supporting large-scale IT projects.</li>
</ul><b>Tools &amp; Systems</b>
<ul><li>Experience using Planisware for project tracking, portfolio governance, and milestone management.</li>
</ul><b>Education</b>
<ul><li>Bachelor&rsquo;s degree in information technology, Cybersecurity, Business, or a related discipline.</li>
</ul><b>Certifications (Preferred)</b>
<ul><li>CISA (Certified Information Systems Auditor)</li>
<li>CRISC (Certified in Risk and Information Systems Control)</li>
<li>CISSP (Certified Information Systems Security Professional)</li>
<li>PMP (Project Management Professional)</li>
</ul><b>Delivery Methodologies</b>
<ul><li>Strong understanding of the Software Development Life Cycle (SDLC).</li>
<li>Experience applying compliance controls in both Agile and Waterfall delivery models.</li>
</ul><b>Professional Skills &amp; Attributes</b>
<ul><li>Regulatory Expertise: Ability to interpret complex regulatory and control requirements and translate them into clear, actionable guidance for technical and project teams.</li>
<li>Analytical Rigor: Strong attention to detail, particularly in validating technical evidence and identifying compliance gaps or control weaknesses.</li>
<li>Consultative Mindset: Ability to function as a trusted advisor while maintaining independence and objectivity when providing recommendations to leadership.</li>
<li>Communication Skills: Strong written and verbal communication skills, with the ability to bridge technical delivery requirements and compliance expectations.</li>
GRC &amp; Project Tool Proficiency: Experience with GRC platforms (e.g., ServiceNow, Archer) and project management tools (e.g., Jira), in addition to Planisware, to maintain visibility across projects and compliance activities.<li>-</li></ul></div></div></div></div></p>

Compliance Project Specialist

Vanguard

<div><div><p><b>About The Job</b></p><p>
In this role, you will help deliver on our investment in GRC modernization. You will lead risk assessments, design and scale forward-looking governance, risk, and compliance programs, and serve as a trusted advisor who helps teams move faster and smarter while staying audit-ready and compliant.</p><p></p><p>
The Governance, Risk &amp; Compliance Analyst, Specialist is a key member of Vanguard&rsquo;s Global Enterprise Security&rsquo;s Governance, Risk, Compliance (GRC) and Strategic Operations team. This position recommends, develops, implements, and monitors enterprise-wide information security policies, standards, and operational guidelines. It assesses the end-to-end integrated GRC framework of information security policies, standards, and operational control linkages to manage cyber security risks within tolerances, satisfy regulatory obligations, and address expanding requirements, with exceptional stakeholder experience. Data-driven approaches will be used to predict risk issues, develop solutions, and partner with key owners and stakeholders. Automation will be used to accelerate delivery and improve effectiveness.</p><p></p><p><b>
Responsibilities</b></p><ul><li>
Works with Enterprise Security and Fraud subdivisions and business units as the technical authority regarding security of application and systems software, equipment, and related capabilities and performance characteristics to evaluate their effectiveness at meeting defined requirements, determining integration requirements and identifying ramifications on operations of their implementation.</li><li>
Conducts security and fraud assessments, risk analyses and assesses contingency plans for to verify existence and effectiveness of safeguards.</li><li>
Supports the development and maintenance of a portfolio of global security and fraud policies and standards. Monitors and maintains the lifecycle of the portfolio. Responsible for oversight of management and decisions related to methodology and policy for all Security and fraud functions.</li><li>
Advises key stakeholders and security policy owners during policy and standards discussions. Interfaces with clients on all inquiries related to Information and IT Security and fraud capabilities.</li><li>
Works with Compliance and Regional Security and Fraud teams to understand global regulatory requirements, develop global and regional policies and standards, and oversee implementation. Interfaces with external regulators for Information and IT Security and Fraud.</li><li>
Reviews and analyzes current and proposed policy and standards directives and IT technical issues which may affect the implementation of Information Security and Fraud across the enterprise.</li><li>
Recommends, develops, implements and coordinates new security policies, standards, controls and operating doctrine at all levels across the company. Interprets policy relating to Vanguard information security and frau functions and provides guidance, as required.</li><li>
Defines and implements automations to accelerate delivery and improve effectiveness.</li><li>
Defines and implements data-driven approaches and dashboards to predict risk issues, develop solutions, and partner with key owners and stakeholders.</li><li>
Designs, implements and supports modernized GRC process and tool capabilities.</li><li>
Participates in special projects and performs other duties as assigned.</li></ul><p></p><p><b>
Qualifications</b></p><ul><li>
Seven years related work experience, Information Security or fraud experience required.</li><li>
Undergraduate degree or equivalent combination of training and experience. Computer Science degree preferred.</li><li>
In-depth knowledge of relevant frameworks and standards (i.e., NIST CSF, NIST 800-53, CIS Controls, ISO 27002) and financial services industry cyber regulations and guidelines, and considered an expert in the domain.</li><li>
Demonstrated experience with GRC solutions platform and automation capabilities.</li><li>
Excellent communication and influencing skills.</li><li>
Influence key stakeholders and security policy and control owners.</li><li>
Professional certification (CISSP, CISM, CompTIA, SANS, ISC2) preferred.</li></ul><p></p><p><b>
Special Factors</b></p><p><b>
Sponsorship</b></p>
Vanguard is not offering visa sponsorship for this position.<p></p><p><b>
About Vanguard</b></p><p>
At Vanguard, we don't just have a mission&mdash;we're on a mission.</p><p></p><p>
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p><p></p><p><b>
How We Work</b></p><p>
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p></div></div>

Governance, Risk & Compliance Analyst, Specialist

Fourth Command

<p>Job Overview</p><p>We are seeking a skilled GRC Analyst to join our Governance, Risk, and Compliance team. The GRC Analyst will be responsible for supporting the implementation, maintenance, and optimization of GRC programs using the OneTrust GRC platform, with hands-on experience in risk assessment, control management, compliance monitoring, audit support, and reporting. The role requires strong technical proficiency in OneTrust for managing policies, risks, audits, and workflows, along with familiarity with other GRC platforms to support enterprise clients in achieving regulatory compliance and risk management objectives.</p><p>Key Responsibilities</p><ul><li><b>OneTrust GRC Platform Operations:</b> Configure, administer, and optimize OneTrust GRC platform including risk assessments, policy management, control mapping, audit workflows, and automated notifications using OneTrust Athena AI for intelligent risk identification and remediation.</li><li><b>Risk Management:</b> Conduct risk assessments, maintain risk registers, track key risk indicators (KRIs), and implement risk treatment plans with automated workflows and stakeholder task assignments in OneTrust.</li><li><b>Compliance Monitoring:</b> Map controls to frameworks (ISO 27001, SOC 2, GDPR, PCI DSS), monitor compliance status, manage evidence collection, and generate compliance reports and dashboards.</li><li><b>Audit and Assessment Support:</b> Support internal and external audits by managing audit workflows, collecting evidence, tracking findings, and facilitating remediation using OneTrust's audit management capabilities.</li><li><b>Policy and Control Management:</b> Develop, review, and maintain security policies, standards, and procedures; map controls across multiple frameworks; and distribute policies with role-based access controls.​</li><li><b>Third-Party Risk Management:</b> Manage vendor assessments, questionnaires, and third-party risk monitoring using OneTrust's integrated workflows and risk scoring features.​</li><li><b>Platform Administration:</b> Manage user roles, permissions, organizational hierarchies, SSO integration (SAML 2.0), SCIM provisioning, and custom workflows in OneTrust GRC.​</li><li><b>Reporting and Analytics:</b> Create custom reports, dashboards, and executive summaries on risk posture, compliance status, audit findings, and KRI trends using OneTrust analytics.​</li><li><b>Cross-Platform Experience:</b> Support integration and migration activities involving other GRC platforms such as RSA Archer, ServiceNow GRC, MetricStream, LogicGate, or Diligent for client engagements.</li><li><b>Stakeholder Support:</b> Respond to customer security questionnaires (SIG, CAIQ), due diligence requests, and compliance inquiries; collaborate with IT, InfoSec, Legal, and business teams.</li></ul><p>QualificationsExperience</p><p>2&ndash;3 years of hands-on experience in GRC operations, compliance, risk management, or information security with demonstrated proficiency in OneTrust GRC platform administration and configuration.</p><p>Technical Skills</p><ul><li>Advanced hands-on experience with OneTrust GRC platform including risk management, audit management, policy management, control mapping, workflows, and Athena AI automation.</li><li>Familiarity with other GRC platforms such as RSA Archer, ServiceNow GRC, MetricStream, LogicGate Risk Cloud, or Diligent GRC.</li><li>Experience with compliance frameworks including ISO 27001, SOC 2, GDPR, PCI DSS, NIST, and privacy regulations.</li><li>Proficiency in risk assessment methodologies, control frameworks, and evidence management.</li><li>Knowledge of SSO (SAML 2.0), SCIM, role-based access controls (RBAC), and API integrations.​</li><li>Strong Excel skills for risk registers, reporting, and data analysis.</li></ul><p>Preferred Certifications</p><ul><li>OneTrust Certified GRC Administrator or OneTrust GRC User Certification</li><li>Certified Information Security Manager (CISM) or Certified in Risk and Information Systems Control (CRISC)</li><li>ISO 27001 Lead Implementer/Auditor</li><li>Certified Data Privacy Solutions Engineer (CDPSE)</li><li>CompTIA Security+ or equivalent</li></ul><p>Education</p><p>Bachelor's degree in Computer Science, Information Security, Cybersecurity, Business Administration, or a related field.</p><p>Soft Skills</p><ul><li>Strong analytical and problem-solving skills for risk identification and compliance gap analysis.</li><li>Excellent written and verbal communication for policy documentation and stakeholder interactions.</li><li>Detail-oriented with ability to manage multiple tasks and deadlines.</li><li>Collaborative team player comfortable working with cross-functional teams.</li></ul><p>Additional Requirements</p><ul><li>Experience responding to customer security questionnaires and due diligence requests.</li><li>Understanding of GRC maturity models and continuous improvement processes.</li><li>Ability to work in fast-paced consulting environment supporting multiple client engagements.</li></ul><p>Resume Information</p><p>How to Apply</p><p>Email your resume to job2026@thefourthcommand.com<br/><b>Subject:</b> FC_GRC_ANALYST_[YOUR NAME]_RESUME</p><p>Resume Requirements</p><ul><li>OneTrust GRC hands-on experience with specific modules used (risk, audit, policy, etc.).</li><li>List of GRC platforms administered (OneTrust primary, others secondary).</li><li>Compliance frameworks implemented or supported.</li><li>Relevant certifications with dates.</li><li>Passport size photo (mandatory).</li></ul><p>Incomplete applications will not be considered.</p><p>Job Type: Full-time</p><p>Pay: AED300,000.00 - AED800,000.00 per year</p><p>Work Location: In person</p>

GRC Analyst

<div>Job Description:<div></div><div><div><b><br>
GRC Security Analyst</b></div><div><b>
Salary: $105,000 - $115,000 DOE</b></div><div><b>
Remote: Greenwood Village</b></div><div></div><div><br>
The GMR Cyber Security Governance, Risk, and Compliance (GRC) Specialist will have a strong understanding of GRC concepts and solutions, and ability to adapt to new technologies, processes, and policies. This individual will participate in planning, developing, implementing, and evaluating policies and procedures for GRC cyber security workstreams and projects. They will help document cyber security risks and associated remediation plans for security compliance, support client and internal security risk assessment, contract review, vendor assessment, security exception processing and related project deliverables to IT partners, auditors, and stakeholders. This individual will have broad IT experience, familiarity with cybersecurity application and infrastructure concepts; experience in healthcare is strongly preferred.</div><div></div><div><b><br>
Responsibilities:</b></div><br>
<div></div><ul><li>
Execute activities to support GRC workstreams and related projects for internal and external security assessment, security vendor/supplier assessment, contract and security policy and risk evaluation and exceptions.</li><li>
Assist in performance of risk analyses and remediation requirements through activities such as the following:</li><li><ul><li>
Respond to business and client assessment and audit requests</li><li>
Participate with Integration Management Office or others to respond to RFI/RFP requests</li><li>
Conduct research, document, and evaluate threats, risk impact, risk likelihood, and recommended remediation.</li><li>
Gather technical, administrative, physical security or other enterprise information related to threats, existing controls, and residual risks</li></ul></li><li>
Perform Vendor Risk and Compliance assessments and communicate remediation requirements.</li><li>
Collaborate with Business, Legal, Compliance, IT, client and other stakeholders to oversee review and provide security requirements and revisions for contracts, ISA, and BAA agreements.</li><li>
Partner to create and maintain GMR policies, standards and procedures to safeguard the integrity of and access to GMR systems, files, and data elements and communicate regulatory and security framework requirements.</li><li>
Analyze security policy compliance and development of information security policy exceptions including coordinating interviews, evidence collection and responses from appropriate subject matter experts, and approvals.</li><li>
Partner with GMR security engineers to evaluate and recommend information technology and information security products, services, and processes to reduce risk and maintain compliance with applicable policies, mandates, laws, and regulations.</li><li>
Maintain knowledge of changing technologies, and provide recommendations for adaptation of new technologies, processes, or policies (for example, the use of AI and related security requirements).</li><li>
Assist in development and delivery of required information technology and security awareness training and annual updates for GMR Workforce.</li><li>
Provide GRC and information security expertise and functional delivery for projects, risk analysis, product, vendor RFI/RFP, IMO and regulatory or other initiatives aligned to other GMR organizations. Be the trusted champion of new security technologies.</li><li>
Support GMR audits and Privacy and Compliance programs and other compliance programs as applicable.</li><li>
Progress job knowledge by tracking and understanding emerging security practices and standards, maintaining credentials, participating in educational opportunities, reading professional publications, developing professional networks, and participating in professional organizations.</li><li>
May coordinate work of others, fostering teamwork and cooperation.</li><li>
Perform other security-related duties as assigned</li></ul><div></div><div><b><br>
Education/Licensing/Certification:</b></div><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Security and Assurance, Risk Management, Information Systems, Security Engineering or related major. Four years of security related experience can be substituted.</li><li>
CISA, CISSP, or CRISC certification (or passing of test) is preferred.</li></ul><div><b>
Skills:</b></div><ul><li>
Knowledge of IT Security Governance, Risk, and Compliance (GRC) concepts and ability to perform risk assessment evaluations.</li><li>
A broad-based understanding of Information Technology, Information Security, and Risk identification and evaluation that spans technical, administrative, physical, and operational security domains.</li></ul><ul><li>
Experience with related domains e.g. Disaster Recovery and Business Continuity, Audit preparation and response, and IT Security and Risk Training, or other.</li><li>
Ability to collaborate with individuals across business and IT domains, and at all levels of the organization.
</li></ul><div> Note &ndash; the next item was missing a bullet.
</div><ul><li>Interprets internal and external business requirements and issues and recommends best practices.</li><li>
Possesses strong analytical ability, consultative skills, strong judgment and the ability to work effectively in a cross-functional, multi-disciplinary, hybrid remote or in person team environment.</li><li>
Ability to adjust to changing priorities and multitask effectively.</li><li>
Ability to assess, comprehend, and communicate complex information including technical and compliance concepts.</li><li>
Requires strong verbal and written communication skills to effectively communicate with all levels of the organization.</li><li>
Proven ability to understand and develop expertise on new regulatory, compliance and security technologies quickly.</li><li>
Well organized with excellent follow up skills and proven ability to meet deadlines.</li><li>
Experience with metrics gathering and reporting processes</li></ul><div></div><div><b><br>
Minimum Required Qualifications</b></div><ul><li>
A minimum of 2 years of experience related to areas of position responsibilities</li><li>
A minimum of 2 years information security work experience</li><li>
GRC Healthcare Industry experience strongly preferred</li><li>
Working knowledge of compliance frameworks, security and privacy management standards and related certifications e.g., NIST CSF,800-171 and 800-53, NIST AI Framework, FedRAMP, HIPAA, HITRUST, PCI DSS, IT General Controls (ITGC), SOC2, ISO 27001, COBIT or others</li><li>
Experience with Cloud based IT Security concepts and solutions</li><li>
Experience performing risk assessment tasks, and risk assessment platforms and tools e.g., Allgress, RSA Archer, CORL Toolkit, or other</li><li>
Exposure to Identity, Credential, and Access Management (ICAM) platforms, tools and concepts is helpful</li></ul></div><div></div><div><div><div><p><br>
Why Choose GMR? Global Medical Response (GMR) and its family of solutions are dedicated to delivering compassionate, quality medical care, primarily in the areas of emergency and patient relocation services. Here you&rsquo;ll embark on meaningful work that will make an impact on you and the customers we serve. View the stories on how our employees provide care to the world at www.AtaMomentsNotice.com.</p></div><p></p><div><p><br>
GMR&rsquo;s Core Behaviors&mdash;keep care at the center, raise your hand, seek to understand, find a way together and be accountable&mdash;unite our teams and set us apart in emergency medical services.</p></div></div></div>
EEO Statement:
<p>
Global Medical Response and its family of companies are an Equal Opportunity Employer, which includes supporting veterans and providing reasonable accommodations for individuals with a disability.</p>
More Information about this Job:
<div>
Check out our careers site <i>benefits page</i><i> </i>to learn more about our benefit options.</div></div>

Security GRC Security Analyst

Search 5830+ Grc specialist jobs near you this April. New roles added regularly across leading industries. Apply today.