Senior Risk Specialist (Security GRC Specialist)
Core
Execute and operationalize cybersecurity governance, risk management, and compliance programs for a global e-commerce platform.
Role type
Senior IC Security GRC Specialist
Builds
Enterprise security risk registers, compliance artifacts, executive-level GRC metrics and dashboards
Domain
Cybersecurity GRC, Information Security, IT Risk Management, E-commerce
Deliverable
dashboards & analysis
Required skills
Cybersecurity GRC, Information Security, IT Risk Management, IT Audit, Korean regulatory compliance, Technical risk assessments, Enterprise risk register management, Remediation workflow management, Evidence collection, Stakeholder coordination, Policy management
Preferred skills
High-scale cloud environments, Fast-paced e-commerce platforms, Enterprise GRC tools, Ticketing workflows, Data visualization tools
Technologies
ISO/IEC 27001, NIST CSF, Network Act, PIPA
Responsibilities
Support compliance operations for domestic and international frameworks (Network Act, PIPA, ISO/IEC 27001, NIST CSF). Serve as a key point of contact for internal and external audits. Conduct technical risk assessments for internal infrastructure, production services, third-party vendors, and new technology initiatives. Maintain and enhance the enterprise Security Risk Register. Partner with Security Engineering, IT, and platform teams to drive remediation of audit findings and control deficiencies. Assist in updating cybersecurity policies and generating executive-level GRC metrics and dashboards.