GRC Specialist, Netcompany Group CISO Office
Core
Develop and maintain risk scenarios, assess control effectiveness, establish automated KPIs for security controls, and translate regulatory requirements into security baselines.
Role type
GRC Specialist (Governance, Risk, and Compliance)
Builds
Data-driven security control effectiveness views and compliance baselines
Domain
Information Security / Cybersecurity
Deliverable
dashboards & analysis
Required skills
Risk assessment, Regulatory interpretation, KPI development, Security awareness program management, Project execution, Technical security understanding
Preferred skills
Software development lifecycle knowledge, Analytic skills, Communication
Technologies
Risk scenarios, KPIs, Phishing simulations, Micro-learning platforms
Responsibilities
Develop and maintain risk scenarios; Assess effectiveness of mitigating controls; Establish automated measurements and KPIs; Interpret regulatory requirements into security baselines; Plan and execute security awareness activities; Drive security improvement projects
Seniority
Mid-level, hands-on IC
