Governance, Risk, and Compliance (GRC) Specialist

Job DescriptionPerform information security auditsDevelop and maintain security testing plansDevelop meaningful metrics to reflect the true posture of the information security to make educated decisions based on riskAssist with development and delivery of security awareness trainingCarry out risk assessments, identifying controls and monitoring controls against objectives and KPI metricsDocument, update, and implement security policies, procedures, and other related documentsInform and advise team members about obligations to comply with the GDPR and other data protection lawsRequired skills and qualifications:In-depth knowledge of ISO 27001, ISO 27005, ISO 27701, ISO 20000, ISO 22301 and SOC2 standardsIn-depth knowledge of Information Security Risk Management lifecycleB.S. in Computer Science or Information SystemsMinimum 5+ years of process documentation experienceCISA, CISM, or CISSP certifiedStrong knowledge of IT systems, IT technologies, etc.Excellent verbal and written communication skillsGood interpersonal skills