Description

You will support the development and operational execution of the security governance, risk, and compliance program.

Responsibilities

• Perform risk assessments addressing security threats, system changes, process improvements, and supplier assessments.
• Manage security compliance activities, enterprise risk management, policy management, and security awareness training.
• Monitor supplier security risk profiles to identify high-risk vendors requiring additional review and treatment plans.
• Collaborate with business teams to drive remediation items to closure and report activities to stakeholders.
• Respond to customer security and compliance questionnaires and support automation activities.

Required Skills

• 4+ years of experience in GRC or information security roles.
• Hands-on experience with ISO 27001 and GDPR.
• Knowledge of SOX, NIST, and CAIQ frameworks.
• Experience with SOC1, SOC2, and WebTrust standards.
• Ability to manage third-party risk and supplier assessments.
• Experience establishing security metrics and reporting.
• Bachelor's degree or equivalent graduate level education.

Key Skills

Education

Any Gradute