Please answer the following questions in order to process your application.
I certify that I am a U.S. citizen, permanent resident, or a foreign national with authorization to work in the United States. *
File Attachments:
(2MB file maximum. doc, docx, pdf, rtf or txt files only)
* denotes required field
Additional Information:
Availability/Notice
Salary Expectation USD
Approximately how far are you willing to travel to work (in miles) ?
Key Privacy Information
When you apply for a job, ComputerWork will collect the information you provide in the application and disclose it to the advertiser of the job.
If the advertiser wishes to contact you they have agreed to use your information following data protection law.
ComputerWork will keep a copy of the application for 90 days.
More information about our Privacy Policy.
Job Details
Senior GRC Specialist (Full Time)
Location: Chicago, Illinois Country: United States of America Rate: $120k-$135k + bonus
Senior GRC Specialist
Salary: $120k-$135k + 10% bonus
Location: Chicago, IL or Austin, TX
Hybrid: 3 days in-office, 2 days remote
*We are unable to provide sponsorship for this role*
Qualifications
- Bachelor's degree
- Strong knowledge on Security frameworks and technologies such as ISO 27001, NIST, SOC
- Technical writing experience
- 4+ years of Information Security experience
- Strong knowledge of Intrusion Detection and Intrusion Prevention technical capabilities.
- Strong knowledge of risk management principles and practices.
- Strong knowledge of security administration and role-based security controls.
- Strong knowledge and use of GRC platforms.
- Knowledge of vulnerability assessment and forensic investigations tools.
- Knowledge of Privileged Access Management technologies
Responsibilities
- Respond to security assessments, questionnaires and audits from clients and third-party business partners in a timely manner. Document and perform assessments as needed.
- Technical writing for policies, standards, and communications. Lead in the creation and maintenance of security policies, standards, processes guidelines and support documentation.
- Lead, evaluate, and supports the processes necessary to assure that Information Technology (IT) systems meet the organization's cybersecurity and risk requirements.
- Ensures appropriate treatment of risk, compliance, and assurance from internal and external perspectives.
- Serve as a subject matter expert for Information Security consulting to technical/non-technical management and staff.
- Manage and support the 3rd Party Security Vendor Risk Management program and life cycle.
- Manage the exception request process and consult as needed.
- Lead the Security Awareness program. This includes roadmap development, measurement, and evaluation of cyber training/education courses and methods based on instructional needs.
- Management and support of the GRC technology platforms.
- Conduct evaluations of an IT program or its individual components to determine compliance with published standards.
Posted Date: 29 Mar 2024
Reference: JSSEC GRC
Employment Agency: Request Technology
Contact: Steven Delvalle