GRC Strategist
3 days ago
This role focuses on leading governance, risk, and compliance engagements across various frameworks.
The ideal candidate will possess a strong understanding of security strategies, risk management, and industry standards.
They should be able to provide advisory services on regulatory requirements and cybersecurity best practices.
A bachelor's or master's degree in Information Security, Cybersecurity, Computer Science, or a related field is required.
Additionally, the candidate should have 7+ years of experience in Cybersecurity GRC, Risk Management, and Security Advisory roles.
Relevant certifications like CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Lead Auditor, and CGEIT are highly preferred.
- Key Responsibilities:
- Develop and maintain security strategies and policies aligned with industry standards.
- Conduct risk assessments and compliance audits to identify areas for improvement.
- Design and implement security governance frameworks to strengthen organizational resilience.
- Engage with senior stakeholders to translate security risks into business impact and strategic recommendations.
- Collaborate with internal/external teams to ensure effective incident response and risk mitigation.
- Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science, or related field.
- 7+ years of experience in Cybersecurity GRC, Risk Management, and Security Advisory roles.
- Strong knowledge of governance frameworks and standards (ISO 27001, NIST, COBIT, PCI-DSS, GDPR, CSA, etc.).
- Relevant certifications preferred:
- CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Lead Auditor, CGEIT.
