Security Specialist
Core
Enable and secure customer organizations by managing GRC frameworks, risk assessments, security policies, and compliance audits.
Role type
GRC Security Specialist
Builds
Security policies, risk assessment reports, and compliance frameworks for client organizations
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
GRC frameworks (enterprise risk, internal audit, regulatory compliance, policy, third-party risk), security standards (ISO27001, NIST), regulatory advisory (HIPAA, PCI DSS, GDPR, DORA), GRC maturity assessments, SOC 2/ISO 27001 audit coordination
Preferred skills
Risk certifications (CRISC, CGEIT, CERA, CISM, CISA), statistical analysis, network/cloud computing basics, project management
Technologies
Microsoft Office 365 Suite, audit and compliance tools
Responsibilities
Configure and monitor network performance to maintain service quality; develop and implement security policies and procedures; assess and manage IT infrastructure and data risks; conduct security awareness training; perform GRC maturity assessments; coordinate SOC 2 and ISO 27001 audits
Seniority
Mid-level, hands-on IC
