Information Security GRC Specialist

Responsibilities

• Support the implementation, maintenance, and continuous improvement of information security governance, risk management, and compliance processes
• Conduct information security risk assessments, maintain risk registers, and track risk treatment and remediation activities
• Develop, review, and maintain information security policies, procedures, standards, and supporting documentation
• Support implementation and ongoing compliance with information security frameworks and standards, including ISO 27001, SOC 2, and NIST
• Perform security compliance gap assessments and monitor corrective actions to ensure timely resolution of identified deficiencies
• Support periodic reviews of information security controls, including access management, asset management, data protection, and other security-related processes
• Collaborate with IT, Software Development, Product, and QA/RA teams to identify security risks and support implementation of appropriate security controls.

Languages