Infosec GRC Specialist

Only for candidates in Argentina or Uruguay.
We are looking for a Infosec GRC Specialist for one of our clients teams. They are expanding their Information Security team and they are looking for an energetic and self-motivated Infosec GRC Specialist to join the global Infosec team. You will be tasked withleading our compliance initiatives across Data Privacy, PCI, Sarbanes-Oxley ITGCs, and SOC2.
Responsibilities:Lead and oversees strategic GRC programs and projects, from concept/definitionthrough planning, execution, delivery, and adoptionCoordinate compliance projects with key stakeholders throughout the company includingLegal, Internal Audit, IT & Information Security, and EngineeringBuild and maintain a unified information security control framework that will meetControl requirements across PCI, SOC2, ISO 27001, NIST CSF, GDPR, CCPA,and other relevant global data privacy regulations.Create and lead our internal vendor risk management programAttend regular cross departmental security meetings as the GRC point of contactEnsure that cyber security risks are logged, tracked and scored in accordance withRisk Management PolicyTake ownership of the cyber risk register and track risks through the remediationphase with key stakeholders in Engineering, IT, and Business Applications.Create, update and maintain GRC Policy & ProceduresPrepare cyber risk reports and metrics to communicate the security posture forExecutives and Board of Directors.
Basic Qualifications:A Bachelor’s degree or higher or equivalent work experience5+ years of experience managing IT Risk & Compliance ProgramsExcellent written and verbal communication skills.Strong technical project management experience.Experience mapping unified controls across common security frameworksExperience with GRC Tools such as ZenGRC, OneTrust, Pathlock, Riskonnect,AuditBoard, etc.Knowledge of Security Frameworks including ISO27001, SOC2, Data Privacy (GDPR,CCPA), NIST CSF, and PCIExperience implementing repeatable processes and driving automation orstandardizationAbility to work across different levels in the organization from Individual contributor toC-Level Executives.Strong analytical and problem solving skills
Bonus:IT Audit BackgroundExperience in a global organizationExperience in building 3rd Party/Vender Risk Programs