Security GRC Consultant

Role: Security GRC Consultant Duration: 6-12+ months Location: Remote workJob Description:

• Triages security issues that are identified through control testing for identifying mitigating and plans for remediation.
• Keeps documentation up to date regarding the risk management process.
• Conducts risk assessments and identifies potential vulnerabilities in the organization's cybersecurity systems.
• Builds and develops reports for management regarding risks within the organization.
• Keeps up to date with emerging cyber threats and industry trends.
• Updates and maintains records in ServiceNow IRM entries

QUALIFICATIONS, EXPERIENCE, & SKILLS

• Minimum Experience: 5+ years of IT business work experience

Desired Certifications:

• OpenFAIR, CCSK, CISSP, CISM or equivalent are highly desirable.
• Decision Making and Critical Thinking: Knowledge of the decision-making process and associated tools and techniques; ability to accurately analyze situations and reach productive decisions based on informed judgment.
• Communicating Complex Concepts: Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple, clear language appropriate to the audience.
• Problem Solving: Knowledge of approaches, tools, techniques for recognizing, anticipating, and resolving organizational, operational or process problems; ability to apply knowledge of problem solving appropriately to diverse situations.
• Project Management: Knowledge of effective project management strategies and tactics; ability to plan, organize, monitor, and control projects, ensuring efficient
• utilization of technical and administrative resources to achieve project objectives.
• Technical Excellence: Knowledge of a given technology and various application methods; ability to develop and provide solutions to significant technical challenges.
• Compliance and Assurance: Knowledge of compliance and assurance processes, regulations and standards involving different systems; ability to facilitate the processes and assess and enhance the organization's internal controls with evolving compliance standards.
• Frameworks and Industry Standards: Knowledge of cybersecurity enterprise programs, policies, and standards to govern the organization's approach towards protecting their systems; Ability to align them with regulations, organization's context, operating environment, and cyber threats. Information Technology (IT) Security Policies: Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
• Statistical Analysis and Measurement: Knowledge of math and statistics; ability to use relevant tools, techniques, statistical principles, and methods required to perform statistical analysis and measurement.