Senior Information Security Risk Specialist (GRC)
Core
Design, implement, and maintain organizational, procedural, and technological security controls to mitigate risk and ensure compliance with global standards.
Role type
Senior Information Security Risk Specialist (GRC)
Builds
Enterprise control frameworks, audit evidence, and security policies for an AI-native cybersecurity platform.
Domain
Cybersecurity / GRC / Compliance
Required skills
Risk management, internal auditing, control design, project management, stakeholder communication, policy documentation, security awareness training, compliance framework assessment, audit remediation, security metrics tracking
Preferred skills
Advanced degree in CS/IT/Security, CISA/CISM/CISSP/CRISC certifications, ISO 27001 LA/LI, experience with COSO/SOX/GDPR/PCI/NIST frameworks
Technologies
GRC tools, SSAE 18 SOC 2, ISO 27001/27002, NIST, COSO, SOX ITGC, GDPR, PCI
Responsibilities
Support planning and execution of IT risk-based security audits and fieldwork; Evaluate global standards and regulations to identify control improvements; Collaborate with control owners on documentation, testing, and remediation; Manage audit findings and track remediation status; Participate in internal security programs (SOC 2, ISO 27001) and support external audits; Provide consultative support for business redesign efforts to improve control environments; Document and update security policies and procedures; Support security awareness training programs; Assist with customer security reviews, RFPs, and external inquiries; Define and track security metrics.
Seniority
Senior, hands-on IC
