Information Security Specialist
Core
Supporting enterprise-wide cyber risk management, governance, and regulatory compliance to protect organizational assets and reputation.
Role type
Information Security Specialist (GRC focus)
Builds
Security policies, risk assessments, compliance reports, and remediation plans
Domain
Financial services / Cybersecurity Governance, Risk, and Compliance
Deliverable
dashboards & analysis
Required skills
Cybersecurity risk management, Security frameworks (NIST 800-53, CSF, ISO), GRC tooling administration, Risk assessment lifecycle management, Regulatory compliance knowledge, Policy development
Preferred skills
GenAI coding assistance, AI process improvement, Active Directory and EntraID administration
Technologies
NIST 800-53, NIST Cybersecurity Framework, ISO, GRC tools, Windows, Linux, Active Directory, EntraID, Microsoft Teams, Excel, PowerPoint, Word, Copilot, ChatGPT
Responsibilities
Maintain assurance and governance activities for security compliance methodologies; Develop and maintain security policies, procedures, and guidelines; Conduct regular security controls testing; Conduct comprehensive risk assessments and oversee risk remediation lifecycle; Prepare regular reports on cyber risk posture for senior management; Assist with regulatory exams by obtaining documentation and drafting responses; Stay current with cybersecurity regulatory standards, trends, and technologies.
Seniority
Mid-level, hands-on IC
