GRC Specialist

Job description

Develops, updates and maintains cybersecurity policies to align with organizational requirements. Identifies, assesses and manages cybersecurity risks to protect information and technology assets. Ensures the cybersecurity program complies with applicable requirements, policies and standards. Develops and reviews cybersecurity policies and related documentation with stakeholders. Establishes and maintains communication channels with stakeholders. Conducts cybersecurity awareness programs and promotes policy awareness. Monitors implementation of cybersecurity policies, principles and practices. Performs initial risk assessment of stakeholder assets and updates it continuously. Reviews, conducts or participates in audits of cyber programs and projects. Develops risk mitigation strategies in line with organizational risk appetite. Ensures cybersecurity decisions are based on sound risk management principles. Performs risk analysis when applications or systems undergo major changes. Ensures cybersecurity risks are managed through the organization's risk governance process. Uses continuous monitoring tools to assess risk on an ongoing basis. Evaluates cybersecurity aspects of contracts for compliance with financial, contractual and legal requirements

Requirements

• proficient in Excel
• experience with cybersecurity
• experience with risk management
• experience with compliance

Skills