Cybersecurity Governance, Risk

Cybersecurity Governance, Risk & Compliance (GRC) SpecialistJob Openings Cybersecurity Governance, Risk & Compliance (GRC) SpecialistAbout the job Cybersecurity Governance, Risk & Compliance (GRC) SpecialistCybersecurity Governance, Risk & Compliance (GRC) SpecialistPosition OverviewWe are seeking a Cybersecurity GRC Specialist to develop, implement, and manage comprehensive governance, risk, and compliance programs aligned with leading cybersecurity frameworks including NIST Cybersecurity Framework, ISO 27001/27002, MITRE ATT&CK, and CIS Controls to ensure organizational security posture and regulatory compliance.Key ResponsibilitiesFramework Implementation & ManagementImplement and maintain NIST Cybersecurity Framework across organizational functions (Identify, Protect, Detect, Respond, Recover)Develop ISO 27001/27002 Information Security Management System (ISMS) and manage certification processesMap organizational security controls to CIS Controls and ensure implementation across all critical security functionsIntegrate MITRE ATT&CK framework for threat modeling, risk assessment, and security control validationEstablish governance structures, policies, and procedures aligned with multiple cybersecurity standardsConduct comprehensive cybersecurity risk assessments and business impact analysesDevelop risk treatment plans including risk acceptance, mitigation, transfer, and avoidance strategiesMaintain enterprise risk registers and ensure regular risk review and update processesPerform gap analyses against security frameworks and develop remediation roadmapsCreate risk-based metrics and KPIs for executive reporting and board communicationsCompliance & Audit ManagementManage regulatory compliance programs including SOX, PCI-DSS, HIPAA, GDPR, and industry-specific requirementsCoordinate internal and external security audits and manage audit finding remediationDevelop compliance monitoring programs and automated compliance reporting capabilitiesMaintain evidence collection and documentation for compliance demonstrationsSupport vendor risk assessments and third-party security evaluationsPolicy & Governance DevelopmentDevelop comprehensive cybersecurity policies, standards, and procedures aligned with business objectivesEstablish security governance committees and risk management oversight structuresCreate security awareness training programs and ensure organization-wide policy complianceManage policy lifecycle including review, approval, communication, and periodic updatesCoordinate cross-functional collaboration for security program implementationRequired QualificationsTechnical Skills5+ years experience in cybersecurity governance, risk management, or compliance rolesExpert knowledge of NIST Cybersecurity Framework, ISO 27001/27002, CIS Controls, and MITRE ATT&CKStrong understanding of regulatory requirements (SOX, PCI-DSS, HIPAA, GDPR) and compliance methodologiesExperience with GRC platforms (ServiceNow GRC, RSA Archer, MetricStream) and risk management toolsKnowledge of security control frameworks and security architecture principlesProficiency in risk assessment methodologies and quantitative risk analysis techniquesGovernance SkillsProven experience developing and implementing enterprise security governance programsStrong understanding of business continuity, disaster recovery, and crisis managementExperience with vendor risk management and third-party security assessmentsKnowledge of board reporting and executive communication for cybersecurity topicsPreferred QualificationsBachelor's degree in Cybersecurity, Risk Management, Business Administration, or related fieldProfessional certifications (CISSP, CISA, CRISC, CISM, ISO 27001 Lead Auditor)Experience with cloud compliance frameworks (SOC 2, FedRAMP, CSA CCM)Background in internal audit or external consulting for cybersecurity assessmentsKnowledge of emerging regulations and privacy frameworks #J-18808-Ljbffr