Information Security GRC Specialist
Core
Drive and coordinate end-to-end preparation of cybersecurity regulatory enquiries, examinations, and information requests, ensuring accurate and timely responses to regulators.
Role type
Senior IC Information Security GRC Specialist
Builds
Regulatory response packages and attestations of adherence to cybersecurity requirements
Domain
Financial Services / Cybersecurity Governance, Risk, and Compliance
Required skills
Cybersecurity regulatory response, Regulatory examinations, Technology risk management, Audit/assurance, Stakeholder engagement, Evidence validation, Framework knowledge (NYSDFS, NIST, ISO 27001), Analytical review, Written communication, Project management
Preferred skills
CISA, CISSP, CISM, CRISC, Internal Audit experience
Technologies
NYSDFS Cybersecurity Regulation, NIST Cybersecurity Framework, ISO/IEC 27001/27002
Responsibilities
Manage cybersecurity regulatory enquiries from receipt through final submission, Translate regulatory requests into clear requirements, Review draft responses and supporting evidence for gaps, Support cybersecurity regulatory attestations, Maintain visibility of response status and deadlines, Build stakeholder relationships and improve response processes