risk and compliance specialist

NORC at the University of Chicago

<div><div><div><div><div><b>JOB SUMMARY:</b></div>
<div>
<div><p>NORC at the University of Chicago is seeking a seasoned IT Risk and Compliance Specialist to join our Information Technology Department within the DSS Security and Compliance team. This critical role will focus on driving the organization&rsquo;s adherence to complex regulatory frameworks, with particular emphasis on FedRAMP, CMMC, NIST 800-171, and ISO 27001. The ideal candidate will bring a wealth of experience in auditing, risk management, and compliance within high-stakes environments, particularly for Government security standards.</p>
<p><i>
Preferably, this position will have a hybrid work schedule of one or two days a week in either our Washington, DC or Chicago, IL office. Remote applicants may also be considered.</i></p></div><br>
</div>
</div><br>
<div><div><b>DEPARTMENT: </b><b>DSS Security and Compliance</b></div>
<div>
<div><p>Technology is integral to NORC&rsquo;s mission of advancing social science research. The IT department delivers innovative, high-quality solutions that support both our staff and clients, ensuring the highest standards of security and compliance.</p></div><br>
</div>
</div><br>
<div><div><b>RESPONSIBILITIES:</b></div>
<div><ul><li>Lead comprehensive internal and external IT compliance audits, ensuring alignment with critical security standards such as FedRAMP, CMMC, NIST 800-171, and ISO 27001.</li>
<li>Execute in-depth risk assessments and security impact analyses of information systems, identifying potential vulnerabilities and proposing mitigation strategies.</li>
<li>Develop, review, and manage key audit documentation, including the creation of corrective action and remediation plans to address identified deficiencies.</li>
<li>Oversee and ensure continuous compliance with contract requirements, with a focus on tracking and reporting the progress of Corrective Action Plans (CAPs).</li>
<li>Collaborate closely with Security Engineers and stakeholders to remediate compliance issues, ensuring alignment with regulations such as FISMA, Section 508, NIST SP 800-53, HITRUST, and HIPAA Security &amp; Privacy standards.</li>
<li>Design, implement, and optimize policies, procedures, and automated processes for compliance in hybrid and multi-tenant infrastructures.</li>
<li>Provide mentorship and strategic guidance to IT teams, translating complex regulatory requirements into actionable technical steps for seamless compliance execution.</li>
<li>Foster strong, collaborative relationships with NORC&rsquo;s research community and other key stakeholders, facilitating a culture of compliance and security.</li>
</ul>
</div></div><br>
<div><div><b>REQUIRED SKILLS:</b></div>
<div><ul><li>Bachelor&rsquo;s Degree in Management Information Systems, Computer Science, Business Administration, or a related field. Or equivalent experience in IT security, risk, or compliance may be considered.</li>
<li>Current certifications in IT security compliance, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).</li>
<li>Minimum of 6+ years of experience in IT security auditing, risk assessment, or compliance, with a primary focus on government security frameworks and contracts.</li>
<li>Proven expertise in auditing IT systems for compliance with security frameworks, including preparing and reviewing System Security Plans (SSPs), Corrective Action Plans (CAPs), and Contingency Plans.</li>
<li>Proficiency in Governance, Risk, and Compliance (GRC) or Information Risk Management (IRM) systems, with a track record of managing compliance across multiple frameworks, including FedRAMP, NIST, and ISO standards.</li>
<li>Deep knowledge of information security protocols across infrastructure layers, including networks, servers, databases, and applications, with hands-on experience in advanced security assessment techniques.</li>
<li>Experience managing compliance in hybrid and multi-tenant infrastructures, with strong familiarity with privacy regulations such as GDPR, CCPA/CPRA, and the HIPAA Privacy Rule.</li>
<li>Extensive experience in the implementation and oversight of frameworks such as FedRAMP, CMMC, NIST 800-171, ISO 27001, and HITRUST.</li>
</ul><i>Qualified applicants must be eligible to work in the U.S. We regret that we are unable to offer visa sponsorship for this position.</i></div>
</div><br>
<div><div><b>SALARY AND BENEFITS:</b></div>
<div>
<div><p>The pay range for this position is $110,000 &ndash; $165,000.</p>
</div>
<div><p>This position is classified as regular. Regular staff are eligible for NORC&rsquo;s comprehensive benefits program. Benefits include, but are not limited to:</p>
</div>
<div><div><ul><li><p>Generously subsidized health insurance, effective on the first day of employment</p>
</li>
<li><p>Dental and vision insurance</p>
</li>
<li><p>A defined contribution retirement program, along with a separate voluntary 403(b) retirement program</p>
</li>
<li><p>Group life insurance, long-term and short-term disability insurance</p>
</li>
<li><p>Benefits that promote work/life balance, including generous paid time off, holidays; paid parental leave, bereavement leave, tuition assistance, and an Employee Assistance Program (EAP).</p>
</li>
</ul> </div></div><div><p><i>NORC&rsquo;s Approach to Equity and Transparency</i></p>
</div>
<div><p><i>Pay and benefits transparency helps to reduce wage gaps. As part of our commitment to pay equity and salary transparency, NORC includes a salary range for each job opening along with information about eligible benefit offerings. At NORC, we take a comprehensive approach to setting salary ranges and reviewing raises and promotions, which is overseen by a formal Salary Review Committee (SRC).</i></p></div><br>
</div>
</div><br>
<div><div><b>WHAT WE DO:</b></div>
<div>
<p>NORC at the University of Chicago is an objective, non-partisan research institution that delivers reliable data and rigorous analysis to guide critical programmatic, business, and policy decisions. Since 1941, our teams have conducted groundbreaking studies, created and applied innovative methods and tools, and advanced principles of scientific integrity and collaboration. Today, government, corporate, and nonprofit clients around the world partner with us to transform increasingly complex information into useful knowledge.</p></div><br>
</div><br>
<div><div><b>WHO WE ARE:</b></div>
<div>
<p>For over 80 years, NORC has evolved in many ways, moving the needle with research methods, technical applications and groundbreaking research findings. But our tradition of excellence, passion for innovation, and commitment to collegiality have remained constant components of who we are as a brand, and who each of us is as a member of the NORC team. With world-class benefits, a business casual environment, and an emphasis on continuous learning, NORC is a place where people join for the stellar research and analysis work for which we&rsquo;re known, and stay for the relationships they form with their colleagues who take pride in the impact their work is making on a global scale.</p></div><br>
</div><br>
<div><div><b>EEO STATEMENT:</b></div>
<div>
<p>NORC is an equal opportunity employer. NORC evaluates qualified applicants without regard to race, color, religion, sex, gender, national origin, disability, status as a protected veteran, sexual orientation, and other legally protected characteristics.</p>
<p>
#LI-MS1</p></div></div></div></div></div><p></p>

IT Risk and Compliance Specialist - Hybrid Chicago Loop Office or Remote

IT Risk and Compliance Specialist - Hybrid Washington DC Office or Remote

Sagar Fabrics

<p>We are seeking a skilled <b>Cybersecurity GRC Specialist</b> to lead and strengthen our Governance, Risk, and Compliance initiatives. This role focuses on managing cybersecurity risks, ensuring regulatory compliance, supporting audits, and implementing security frameworks to protect organizational information assets.</p><p><b>Key Responsibilities</b></p><ul><li>Lead and manage Governance, Risk, and Compliance (GRC) activities across the organization</li><li>Perform cybersecurity risk assessments and maintain enterprise risk registers</li><li>Develop, review, and update information security policies, standards, and procedures</li><li>Ensure compliance with frameworks and regulations such as ISO 27001, SOC 2, GDPR, PCI-DSS, and NIST</li><li>Coordinate and support internal and external security audits</li><li>Track, remediate, and report audit findings and risk treatment plans</li><li>Conduct third-party/vendor risk assessments and due diligence</li><li>Monitor compliance with regulatory, legal, and contractual security requirements</li><li>Collaborate with IT, Legal, and Business teams to implement security controls</li><li>Prepare risk reports, compliance dashboards, and management presentations</li><li>Stay updated with evolving cybersecurity threats, regulations, and best practices</li></ul><p><b>Required Skills &amp; Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field</li><li>3+ years of experience in cybersecurity GRC, risk management, or compliance</li><li>Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, SOC 2, PCI-DSS, GDPR)</li><li>Experience in conducting risk assessments and audits</li><li>Strong documentation, policy writing, and reporting skills</li><li>Understanding of IT controls, data protection, and security governance</li><li>Excellent communication and stakeholder management skills</li></ul><p><b>Preferred / Good to Have</b></p><ul><li>Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CISSP (preferred)</li><li>Hands-on experience with GRC tools (ServiceNow GRC, Archer, One Trust, etc.)</li><li>Experience in cloud security compliance (AWS, Azure, GCP)</li><li>Knowledge of data privacy laws and regulatory environments</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: ₹25,000.00 - ₹50,000.00 per month</p><p>Benefits:</p><ul><li>Provident Fund</li></ul><p>Work Location: In person</p>

Cybersecurity GRC Analyst

هيئة التأمين | Insurance Authority

<div>
 <p>
  <strong>
   Overview:
  </strong>
 </p>
 <p>
  This role is conducted within the vision, mission, and strategic plan of the Insurance Authority The Governance preserves the integrity of cybersecurity charters, policies, and risk records, keeping them current, traceable, and audit-ready Reporting to the Manager of Governance, this role will administer end-to-end governance workflows&mdash;capturing stakeholder input, tracking compliance obligations, and escalating overdue actions&mdash;to maintain alignment with regulatory mandates The position converts governance data into concise dashboards and briefs that inform leadership decisions, support external attestations, and promote a culture of disciplined risk management across the Division Rigorously maintaining evidence libraries and risk registers, the Specialist enables timely, transparent engagement with auditors, regulators, and key third-party partners.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities and Tasks:
  </strong>
 </p>
 <ul>
  <li>
   Execute the regular update, version control, and archival of cybersecurity charters, standards, and procedures in the central GRC repository.
  </li>
  <li>
   Maintain an accurate evidence library for internal and external audits, ensuring artefacts are catalogued in accordance with the Authority&rsquo;s taxonomy and retention schedule.
  </li>
  <li>
   Prepare initial drafts of governance reports, dashboards, and management briefs, validating completeness before escalation to the Manager of Governance.
  </li>
  <li>
   Administer the end-to-end policy review calendar, tracking due dates, obtaining stakeholder feedback, and logging approvals in the governance workflow tool.
  </li>
  <li>
   Publish newly endorsed policies across authorized communication channels and confirm user accessibility, liaising with Digital Workplace and IT Service Desk teams as required.
  </li>
  <li>
   Populate and maintain the compliance obligations register, recording control-test results, remediation actions, and target closure dates.
  </li>
  <li>
   Follow up on open findings with control owners, documenting status updates and escalating overdue actions to the Manager of Governance for intervention.
  </li>
  <li>
   Enter new risk entries, update risk attributes, and attach supporting evidence in the enterprise GRC platform under the direction of risk owners.
  </li>
  <li>
   Generate periodic risk-heat maps and exception logs, verifying data integrity before circulating to the Governance team for review.
  </li>
  <li>
   Assist in coordinating governance awareness sessions by scheduling logistics, preparing participant materials, and collecting attendance records.
  </li>
  <li>
   Support post-incident lessons-learned reviews by compiling documentation packs, capturing meeting minutes, and distributing action items to responsible teams.
  </li>
  <li>
   Perform other job duties as assigned.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job requirements:
  </strong>
 </p>
 <p>
  <strong>
   Educational Qualifications (required)
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s Degree in Governance, Business Administration, Law, Finance or a related field
  </li>
  <li>
   Master&rsquo;s degree preferred
  </li>
 </ul>
 <p>
  <strong>
   Certifications (required)
  </strong>
 </p>
 <ul>
  <li>
   Relevant professional certification (e.g., GRCP, GRCA, CRMP) is required
  </li>
 </ul>
 <p>
  <strong>
   Experience
  </strong>
 </p>
 <ul>
  <li>
   A Bachelor&rsquo;s degree is required
  </li>
 </ul>
 <p>
  <strong>
   Language
  </strong>
 </p>
 <p>
  (A1-A2: Basic, B1-B2: Intermediate, C1-C2: Fluent)
 </p>
 <ul>
  <li>
   English (C1), Arabic (C2)
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Competencies required:
  </strong>
 </p>
 <p>
  <strong>
   Core competencies
  </strong>
 </p>
 <ul>
  <li>
   Ethics &amp; Integrity (Beginner)
  </li>
  <li>
   Effective Communication (Beginner)
  </li>
  <li>
   Collaboration &amp; Horizontality (Beginner)
  </li>
  <li>
   Personal Competence (Beginner)
  </li>
  <li>
   Analysis and Problem Solving (Beginner)
  </li>
 </ul>
 <p>
  <strong>
   Technical competencies
  </strong>
 </p>
 <ul>
  <li>
   Corporate Governance (Beginner)
  </li>
  <li>
   Delegation of Authority (Beginner)
  </li>
  <li>
   Board Support Governance (Beginner)
  </li>
  <li>
   Governance Policy Management (Beginner)
  </li>
  <li>
   Governance Maturity Evaluation (Beginner)
  </li>
 </ul>
 <p>
 </p>
</div>


Tamheer Opportunity - Specialist of Governance

Concentrix

<p></p><div><p>Job Title:
</p>Specialist I, Governance, Risk and Compliance
<p></p><p>Job Description
</p><p>We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.
</p><p></p><p>The global technology and services leader that powers the world&rsquo;s best brands, today and into the future. We&rsquo;re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we&rsquo;re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.
</p><p></p><p>In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today&rsquo;s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.
</p><p></p><p>Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we&rsquo;re proud to be recognized with awards such as &quot;World's Best Workplaces,&quot; &ldquo;Best Companies for Career Growth,&rdquo; and &ldquo;Best Company Culture,&rdquo; year after year.
</p><p></p><p>We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.
</p><p></p><p>Join us and be part of this journey towards greater opportunities and brighter futures.
</p><p></p><p><b>Role Description:
</b></p><p>We are seeking a professional with <b>3&ndash;5 years of experience </b>in Information Security Risk Management to support global business operations and third-party engagements. This role involves driving risk management activities, conducting assessments, supporting audits, and ensuring compliance with contractual, regulatory, and company standards.
</p><p>The ideal candidate will balance technical expertise with business acumen, think creatively to solve problems, and build strong relationships across teams while maintaining a proactive, &ldquo;ready-to-act&rdquo; attitude.
</p><p></p><ul><li><h2 class="jobSectionHeader"><b>Responsibilities:
</b></h2></li></ul><p></p><p><b>Key Responsibilities:
</b></p><ul><li>Lead and manage Information Security Risk Management activities across internal business units and third parties.
</li><li>Maintain and continuously improve Concentrix&rsquo;s risk management frameworks.
</li><li>Conduct and support risk assessments for business teams and external partners.
</li><li>Deliver training and awareness programs on risk management practices.
</li><li>Interpret contractual and regulatory requirements to align with risk management strategies.
</li><li>Develop and maintain documentation, policies, and procedures related to risk management.
</li><li>Support and manage both internal and external risks.
</li><li>Respond to client audits, reviews, and assessments with timely and structured methodologies.
</li><li>Communicate risks, vulnerabilities, and findings effectively to senior management and stakeholders, ensuring closure and governance of identified issues.
</li><li>Complete all assigned, mandatory training within the timeframe provided
</li><li>Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports
</li></ul><p></p><p><b>Accountability:
</b></p><ul><li>Drive risk management activities at the location level and across global engagements.
</li><li>Ensure frameworks and processes remain aligned with business, regulatory, and contractual obligations.
</li><li>Act as a key liaison between business teams, support teams, and external stakeholders during audits and assessments.
</li><li>Provide clear reporting and tactical influence to leadership regarding risk exposure and mitigation.
</li></ul><p></p><p><b>Qualifications:
</b></p><ul><li><b>Education: </b>Bachelor&rsquo;s degree (preferred, ideally in Computer Science, Information Security, Risk Management, or related field).
</li><li><b>Experience: </b>3&ndash;5 years of hands-on experience in security, privacy, and compliance risk management.
</li><li><b>Certifications (preferred): </b>CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, or other professional security/privacy credentials.
</li></ul><p></p><p><b>Candidate Profile:
</b></p><ul><li>Strong analytical and problem-solving skills with the ability to balance risk vs. business opportunity.
</li><li>Excellent communication and stakeholder management skills.
</li><li>Collaborative team player with a proactive, adaptable mindset.
</li><li>Detail-oriented, organized, and able to manage multiple priorities under pressure.
</li></ul><p></p><p>Location:
</p>EGY Alexandria - 5th Floor, Matajer Tower 2, 51 - 61 Fawzi Moaz Street, Smouha, Sidi Gaber
<p></p><p>Language Requirements:
</p><p></p><p>Time Type:
</p>Full time
<p><b>If you are a California resident, by submitting your information, you acknowledge that you have read and have access to the </b><b>Job Applicant Privacy Notice for California Residents</b></p></div><p></p>

Specialist I, Governance, Risk and Compliance

KD Supplychain Solutions Pvt. ltd.

<p>A Compliance Officer ensures an organization adheres to legal standards, internal policies, and regulatory requirements, minimizing risk and legal exposure. Key duties involve auditing, policy creation, staff training, and managing vendor compliance to ensure third-party partners meet legal obligations. <b>Key Responsibilities</b></p><ul><li><b>Regulatory Compliance &amp; Monitoring:</b> Tracking, interpreting, and implementing changes in laws, regulations, and industry trends.</li><li><b>Vendor Compliance:</b> Conducting due diligence on third-party vendors and partners to ensure their operations align with legal and company standards.</li><li><b>Audits and Assessments:</b> Conducting regular internal audits and risk assessments to identify weaknesses and ensure compliance.</li><li><b>Policy Development:</b> Creating, updating, and enforcing internal policies and procedures to ensure compliance.</li><li><b>Reporting &amp; Training:</b> Educating staff on compliance matters, maintaining records, and reporting to senior management.</li><li><b>Incident Response:</b> Investigating and addressing potential compliance breaches or non-compliance situations.</li></ul><p>Job Type: Full-time</p><p>Pay: ₹25,000.00 - ₹30,000.00 per month</p><p>Benefits:</p><ul><li>Health insurance</li><li>Provident Fund</li></ul><p>Work Location: In person</p>

Compliance Officer

Pearson

<div><p>Job Title: &ndash; Lead Specialist, Information Security</p>
<p><b>Role Overview</b></p>
<p>Cybersecurity Governance, Risk &amp; Compliance function sits within the Chief Information Security Office as part of the Digital and Technology organisation that consists of a wide range of shared services reporting to the Chief Information Officer at Pearson.</p>
<p>We are seeking a Cybersecurity GRC professional with strong experience in reviewing supplier and customer contracts, supporting customer security questionnaires and contractual security clauses, and helping to scale GRC processes through automation and tooling.</p>
<p>This role sits at the intersection of cybersecurity, risk, and legal, partnering closely with Data Privacy, Legal, Technology Procurement, and Technology teams to ensure security requirements are assessed, negotiated, and managed efficiently without slowing the business.</p>
<p>A legal, compliance, or contract-focused background (formal or practical) is highly desirable.</p>
<p><b>Key Responsibilities</b></p>
<p><b>Contract Review &amp; Negotiation (Customer &amp; Supplier)</b></p>
<ul><li>Review customer and supplier contracts for cybersecurity, data protection, privacy, and risk-related clauses.</li>
<li>Assess contractual requirements against internal security controls, policies, and certifications (e.g. ISO 27001, SOC 2, Cyber Essentials).</li>
<li>Support Legal and Commercial teams during contract negotiations, advising on acceptable security positions, deviations, and risk trade-offs.</li>
<li>Identify and document non-standard security obligations and ensure appropriate risk acceptance or remediation plans are in place.</li>
<li>Maintain and improve security contract clause libraries and standard positions.</li>
<li>Support Sales, Legal, and Procurement teams by providing clear, pragmatic security positions that minimise unnecessary negotiation and friction.</li>
<li>Ensure customer security questionnaires and contract reviews are completed in a way that protects the organisation while supporting rapid deal closure.</li>
</ul><p><b>Customer Assurance &amp; Sales Enablement</b></p>
<ul><li>Respond to customer security questionnaires, due diligence requests, and contractual security queries.</li>
<li>Act as a subject matter expert for customer-facing security discussions, supporting Sales and Customer Success teams.</li>
<li>Ensure responses are accurate, consistent, scalable, and reusable.</li>
</ul><p><b>GRC Automation &amp; Tooling</b></p>
<ul><li>Help design, implement, and optimise GRC tooling and automation (e.g. contract review workflows, questionnaire automation, evidence repositories).</li>
<li>Identify opportunities to reduce manual effort through:</li>
<li>Automated questionnaire responses</li>
<li>Clause mapping and standardised positions</li>
<li>Workflow tooling and dashboards</li>
<li>Partner with Legal, Procurement, and IT to embed GRC processes into business-as-usual tooling.</li>
<li>Identify and eliminate unnecessary complexity in security requirements, documentation, and workflows.</li>
<li>Continuously improve turnaround times for:</li>
<li>Customer security reviews</li>
<li>Contractual security assessments</li>
<li>Supplier risk evaluations</li>
<li>Measure and track improvements in time-to-market and operational efficiency as part of GRC process maturity.</li>
</ul><p><b>Governance, Risk &amp; Compliance</b></p>
<ul><li>Policy Maintenance and Updating</li>
<li>Maintain and update cybersecurity policies and standards in line with the evolving threat and compliance landscape, including frameworks such as NIST.</li>
<li>Ensure all policies are current, comprehensive, and in compliance with industry standards and regulatory requirements.</li>
<li>Collaborate with stakeholders to review and implement policy changes as necessary.</li>
<li>Support the maintenance of security policies, standards, and control mappings.</li>
<li>Contribute to internal and external audits where contractual obligations are in scope.</li>
<li>Help mature the organisation&rsquo;s risk management posture.</li>
<li>Collaborate closely with leaders and teams across Digital and Technology organisation to align portfolio initiatives with the cybersecurity strategy and business objectives</li>
<li>Extend the portfolio management role to include overseeing the governance function, ensuring compliance with applicable laws, regulations, and industry standards, as well as internal policies and procedures</li>
<li>Establish and maintain strong relationships with key stakeholders, including business leaders, technology teams, and external partners, to ensure effective communication, collaboration, and support for portfolio initiatives</li>
<li>Identify and assess risks associated with portfolio initiatives, develop risk mitigation strategies, and implement appropriate controls to minimize cybersecurity-related risks</li>
</ul><p><b>Required Skills &amp; Experience</b></p>
<p><b>Essential</b></p>
<ul><li>Experience in a cybersecurity GRC, risk, compliance, or assurance role.</li>
<li>Hands-on experience reviewing or responding to security clauses in customer and/or supplier contracts.</li>
<li>Strong understanding of:</li>
<li>Information security principles</li>
<li>Third-party risk</li>
<li>Experience responding to customer security questionnaires (e.g. SIG, CAIQ, bespoke).</li>
<li>Ability to clearly communicate risk to data privacy, legal, commercial, and non-technical stakeholders.</li>
<li>Strong written skills with attention to detail.</li>
</ul><p><b>Desirable</b></p>
<ul><li>Legal, contracts, or compliance background (e.g. law degree, paralegal experience, in-house legal exposure, or equivalent practical experience).</li>
<li>Experience working closely with Legal, Procurement, or Commercial teams.</li>
<li>Familiarity with security frameworks and certifications (ISO 27001, SOC 2, NIST, Cyber Essentials).</li>
<li>Experience implementing or improving GRC tooling or automation (e.g. IronClad, GRC tools).</li>
<li>Experience in SaaS, technology, or regulated environments.</li>
</ul><p><b>What Success Looks Like</b></p>
<ul><li>Faster, more consistent responses to customer security and contract requests.</li>
<li>Reduced friction between Sales, Legal, and Security.</li>
<li>Clear, repeatable contract security positions with documented risk decisions.</li>
<li>Scalable GRC processes enabled by automation and tooling.</li>
<li>Improved visibility of contractual security obligations and associated risks.</li>
<li>Security and contract reviews that enable faster sales cycles and supplier onboarding.</li>
<li>Clear, simple, and repeatable security positions that reduce back-and-forth with customers.</li>
<li>Measurable reductions in response times for customer security questionnaires and contract reviews.</li>
<li>GRC processes that are seen internally as enablers of the business, not blockers.</li>
</ul><p><b>Why Join Us</b></p>
<ul><li>Opportunity to shape and scale a modern, automation-first GRC function.</li>
<li>High exposure widely across Pearson including across Data Privacy, Legal, Sales, Procurement, and Technology.</li>
<li>Real influence on how the business manages contractual cybersecurity risk.</li>
<li>Supportive environment for professional development</li>
</ul><p><b>Who we are:</b></p>
<p>At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson.</p>
<p>Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.</p>
<p>If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing TalentExperienceGlobalTeam@grp.pearson.com.</p>
<p><b>Job:</b> Security</p>
<p><b>Job Family:</b> TECHNOLOGY</p>
<p><b>Organization:</b> Corporate Strategy &amp; Technology</p>
<p><b>Schedule:</b> FULL\_TIME</p>
<p><b>Workplace Type:</b> Hybrid</p>
<p><b>Req ID:</b> 22519</p></div><p></p>

Lead Specialist, Information Security

Search 10000+ Risk and compliance specialist jobs near you this March. New roles added regularly across leading industries. Apply today.