We are looking for a Senior GRC Specialist, experienced with cyber security regulations, financial institutions, and related compliance such as SOC2. This is a great opportunity to elevate the cyber security operations to a whole new level, understanding and securing our cloud-based technology, managing risk assessment and remediation plans, and promoting cyber security.

Responsibility

• Design and maintain processes, policies and related guidelines.
• Conduct risk assessment on systems, processes, vendors.
• Define and maintain a security maturity program.
• Ensure remediation plans are implemented and carried out
• Lead our compliance operations, including ISO27001, SOC2.
• Develop, deliver and maintain an ongoing Information security awareness program
• Execute the Information security audit plan.
• Operate and utilize GRC tools.

Requirement

• At least 8 years of information security, risk management and compliance experience.
• Experience in information security regulations and best practices such as: SOC2, CIS, NIST and privacy laws.
• Experience in leading a company to SOC2 certification.
• Knowledge of risk assessment methodologies
• Experience in major risk assessment projects and activities.
• Hands-on experience in building awareness programs, including evaluating effectiveness.
• Experience on assessment of existing security controls and defining new controls and solutions
• Ability to take proactive initiative given general direction
• Strong oral and written communications and presentation skills

Think you have the passion and inner fire for it? Bring it on and challenge us!

esh is proud to be an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital state, disability or gender identity.