Cyber Security - Risk & Compliance Specialist

Cyber Security - Risk & Compliance Specialist

As a Cybersecurity GRC Assistant Manager, you will play a critical role in safeguarding our organization's digital assets. You will be responsible for developing, implementing, and maintaining robust cybersecurity governance, risk, and compliance (GRC) frameworks. This involves:

Key Responsibilities:

1. Governance Framework Development and Maintenance:
   Develop, update, and implement comprehensive cybersecurity policies, standards, and procedures aligned with industry best practices and regulatory requirements.
   Establish and manage a robust GRC framework to oversee and manage cybersecurity risks.
   Conduct regular reviews and updates to ensure the effectiveness and relevance of the GRC framework.
2. Risk Assessment and Management:
   Lead regular cybersecurity risk assessments, including vulnerability assessments, threat modeling, and business impact analysis.
   Identify, evaluate, and prioritize cybersecurity risks, and develop mitigation strategies to minimize potential impact.
   Monitor and manage residual risks, ensuring they are within acceptable tolerance levels.
3. Regulatory Compliance:
   Stay informed about evolving cybersecurity regulations and industry standards.
   Ensure the organization's compliance with relevant regulations and standards.
4. Collaboration with Cybersecurity Teams:
   Work closely with blue and red teams to ensure that GRC practices align with operational needs and enhance the organization's overall security posture.

Experience:
3 to 6 years' experience in the same field.

Qualifications and Skills:

• Strong understanding of cybersecurity frameworks, standards, and regulations (e.g., NIST Cybersecurity Framework, ISO 27001, GDPR, HIPAA)
• Proven experience in conducting risk assessments, vulnerability assessments, and penetration testing
• Excellent analytical and problem-solving skills
• Strong communication and interpersonal skills
• Ability to work independently and as part of a team
• Strong attention to detail and organizational skills
• Relevant cybersecurity certifications (e.g., CISSP, CISM, CISA) preferred