Principal, Risk (Security GRC)
Core
Lead enterprise-wide security Governance, Risk, and Compliance (GRC) programs, managing policies, risk frameworks, and regulatory compliance for a global e-commerce platform.
Role type
Principal Security GRC Manager
Builds
Enterprise security governance frameworks, risk management systems, and compliance certification programs (ISMS-P, ISO 27x, SOC2, etc.)
Domain
Cybersecurity / Information Security / E-commerce
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security policy and guideline management, Risk identification and management, Regulatory compliance and audit support, Security training and awareness program design, Cross-functional collaboration, Strategic program planning
Preferred skills
ISMS-P or ISO27001 certification, Security control validation in cloud environments (AWS), GRC tool usage (JIRA, SharePoint), Technical security architecture understanding
Technologies
JIRA, SharePoint, AWS, ISMS-P, ISO 27x, SOC2, CBPR, CSAP
Responsibilities
Manage enterprise security policies and guidelines, Operate the information security risk management framework, Support regulatory compliance and certification acquisition, Design and advance the corporate security control system, Lead GRC initiatives and improvement projects
Seniority
Senior, hands-on IC with strategic oversight
