GRC Specialist

We are seeking a dedicated Security GRC (Governance, Risk, and Compliance) Specialist to join our security team.
The ideal candidate will play a critical role in managing our organization's security governance, risk management, BCP, and compliance efforts. This role involves implementing and maintaining security frameworks, managing security risks, ensuring compliance with relevant standards, and promoting security awareness across the organization.
Key Responsibilities:
Develop and implement security policies, procedures, and standards in line with industry best practices
Ensure security governance processes align with organizational goals and regulatory requirements
Lead the development, implementation, and maintenance of the organization's Business Continuity Planning (BCP) to ensure operational resilience during disruptions, while coordinating with key stakeholders for risk assessments and recovery strategies
Identify, assess, and manage security risks across the organization
Develop and maintain a comprehensive risk management program, including risk registers and mitigation plans
Manage the third-party security risk management program, including conducting vendor assessments and ongoing monitoring.
Work with cross-functional teams to ensure that risks are effectively managed and mitigated
Ensure the organization complies with relevant security standards and frameworks, such as SOC 2, ISO 27001, NIST, etc
Lead efforts to achieve and maintain necessary security certifications
Provide support during internal and external audits, including preparing necessary documentation and coordinating with auditors
Address audit findings and implement corrective actions to improve security posture
Design and implement security awareness programs to educate employees on security best practices
Conduct regular training sessions and awareness campaigns to promote a security-conscious culture.