Infosec GRC Specialist

Only for candidates in Argentina or Uruguay.

We are looking for a Infosec GRC Specialist for one of our clients teams. They are expanding their Information Security team and they are looking for an energetic and self-motivated Infosec GRC Specialist to join the global Infosec team. You will be tasked with

leading our compliance initiatives across Data Privacy, PCI, Sarbanes-Oxley ITGCs, and SOC2.

Responsibilities:

Lead and oversees strategic GRC programs and projects, from concept/definition

through planning, execution, delivery, and adoption

Coordinate compliance projects with key stakeholders throughout the company including

Legal, Internal Audit, IT & Information Security, and Engineering

Build and maintain a unified information security control framework that will meet

Control requirements across PCI, SOC2, ISO 27001, NIST CSF, GDPR, CCPA,

and other relevant global data privacy regulations.

Create and lead our internal vendor risk management program

Attend regular cross departmental security meetings as the GRC point of contact

Ensure that cyber security risks are logged, tracked and scored in accordance with

Risk Management Policy

Take ownership of the cyber risk register and track risks through the remediation

phase with key stakeholders in Engineering, IT, and Business Applications.

Create, update and maintain GRC Policy & Procedures

Prepare cyber risk reports and metrics to communicate the security posture for

Executives and Board of Directors.

Basic Qualifications:

A Bachelor’s degree or higher or equivalent work experience

5+ years of experience managing IT Risk & Compliance Programs

Excellent written and verbal communication skills.

Strong technical project management experience.

Experience mapping unified controls across common security frameworks

Experience with GRC Tools such as ZenGRC, OneTrust, Pathlock, Riskonnect,

AuditBoard, etc.

Knowledge of Security Frameworks including ISO27001, SOC2, Data Privacy (GDPR,

CCPA), NIST CSF, and PCI

Experience implementing repeatable processes and driving automation or

standardization

Ability to work across different levels in the organization from Individual contributor to

C-Level Executives.

Strong analytical and problem solving skills

Bonus:

IT Audit Background

Experience in a global organization

Experience in building 3rd Party/Vender Risk Programs