Cybersecurity Lead - GRC

· Identifying, assessing, and mitigating potential risks across various areas of the organization, including IT security, business processes, and regulatory compliance. 

· Developing, implementing, and maintaining GRC programs and processes to support compliance and risk management efforts. 

· Assisting with internal and external audits, responding to audit findings, and ensuring corrective actions are implemented. 

· User Access review 

· Creating and maintaining policies and procedures related to governance, risk, and compliance. 

· Conducting gap analysis and implementing frameworks and standards such as ISO 27001, GDPR, NIST, and SOX.

· Developing and revising policies, standards, processes, and guidelines for the organization. · Conducting vendor risk assessments against organizational security requirements.

· Continually testing and monitoring the effectiveness of security controls. 

· Conducting research to aid threat assessment or risk mitigation activities.

· Assist the department in responding to inquiries from the business units about ongoing operational compliance 

· Working with various teams and departments to ensure GRC practices are integrated into business operations.

 · 5+ years of direct experience in information security, with a main emphasis on risk and compliance

 · 3+ years of expertise conducting ISO 27001 and SOC 2 audits, as well as handling audit responses 

· Thorough understanding of market structures, including relevant regulatory compliance requirements (ISO27001, SOC 2, NIST, PCI, GDPR, etc.) 

· Knowledge of identity management standards, storage, and disaster recovery in the cloud and On Premise 

· Knowledge of GRC tool techniques and best practices

 · Proven track record of organizing and carrying out several risk and compliance projects 

· Ability to successfully manage third-party audits, compile evidence, and organize audit responses

 · Effective written communication skills to develop & maintain the policies and procedures; the capability to communicate with cross-functional teams.

· Proven analytical and problem-solving abilities for managing initiatives that advance corporate goals

 · Bachelor’s degree in computer science, information systems, or Cybersecurity

 · Preferred Certification: CISA