Cybersecurity Governance, Risk and Compliance Specialist
Core
Execute and improve cybersecurity Governance, Risk, and Compliance (GRC) activities across the organization, including risk assessments, compliance initiatives, and governance reporting.
Role type
Cybersecurity GRC Specialist
Builds
Cybersecurity policies, standards, risk registers, and compliance evidence repositories
Domain
Cybersecurity / Risk Management / Compliance
Deliverable
dashboards & analysis
Required skills
Cybersecurity risk assessment, risk analysis methodologies, security standards (ISO, NIST), threat modeling, third-party risk management, compliance reporting, stakeholder communication
Preferred skills
CISSP/CISA/CISM/CIRISC certification, Aerospace industry knowledge
Technologies
ISO, NIST
Responsibilities
Conduct cybersecurity risk assessments for projects, technologies, applications, suppliers, and business initiatives; Advise project teams on cybersecurity risk requirements throughout the project lifecycle; Maintain cybersecurity documentation including policies, standards, processes, and awareness materials; Collect and validate information for compliance, audit, and governance reporting; Contribute to risk awareness routines and performance indicators; Collaborate with IT, cybersecurity, business, and audit stakeholders to obtain evidence and support action closure; Support third-party risk management activities including supplier maturity reviews and contract security considerations; Contribute to dashboards, metrics, and status updates for the GRC team.