Sr. Governance Risk and Compliance Specialist

Profile

Job Description
Job Number:
39045
Sr. Governance, Risk and Compliance Specialist
Job Description:
This position is expected to lead and carry out any Risk Assessment activities for corporate GRC. Examples would be Corporate IT Risk Assessment (RA), Password Expiration RA, and many Gap Assessments to support ISO certification. They also assist with focused RAs done by other team members (PCI, HIPAA, SOC, etc.) and the GAAS Team. This contractor will learn the process, assist with the backlog and cover additional duties in this area. Our client performs many risk and compliance projects to meet regulatory and customer demand. This requires building a solid GRC program to manage and track Risk and Compliance activities in a centralized and efficient manner that allows continuous monitoring and reporting. In order to best implement this program, we require someone to lead the design and implementation of the GRC platform, track compliance for the GRC Program, and work continuously to improve our GRC Program processes. Failure to do this will result in elevated expenses and manpower hours to manually maintain a GRC program.
Responsibilities:
The Sr Governance, Risk and Compliance (GRC) Specialist, under limited supervision, will be responsible for supporting the IT Governance, Risk and Compliance Program.
They will perform risk assessments, gap analysis and overall security controls guidance around security standards such as ISO 27001, National Institute of Standards and Technology (NIST 800-53), IRS 1075 and other security frameworks.
They will lead efforts to design, implement, and manage IT GRC program requirements within the ServiceNow GRC platform.
The Sr GRC Specialist will also perform Plan of Action and Milestone (POAM) activities to track remediation efforts, complete security risk tracking and reporting, and Information Technology audit preparation and response.
Education Requirements:
Education Bachelor's degree in a related field, preferably Computer Science, Information Technology or Cybersecurity. CRISC, CRMA, or ServiceNow CIS-Risk and Compliance certifications preferred.
Desired Background/Skills:
Strong background in executing Risk Assessment and remediation activities.
Strong understanding of IT Governance activities which support the organizations policies, standards, and procedures.
Knowledge of regulatory standards and security frameworks; PCI, FISMA, NIST 800-53, HIPAA, ISO 27001/27002.
Knowledge of risk assessment methodologies and practices.
Experience working with the ServiceNow GRC platform.
Understanding of IT Security controls and best practice.
Highly motivated individual with excellent organizational skills, detail oriented, with the ability to stay on top of a variety of commitments and deadlines; must be able to work independently and as a team to maintain workload and report on problems or progress in a timely manner.
Strong time management skills (schedules, timelines, and task prioritization) and ability to work with minimal supervision or guidance.
The ability to be flexible with others, to display tact and diplomacy, and to maintain a high degree of confidentiality and integrity.
Experience with the ServiceNow issue management ticketing system.
Qualifications:
This person must have the ability to convey technology and security concepts to management and ideally has technical knowledge and/or experience in security with a proficiency in a risk management framework with the ability to assess administrative and technical controls.
A successful candidate must be driven and goal-oriented with the ability to complete tasks with limited supervision within an evolving and entrepreneurial environment.
The Sr. GRC Specialist will work with other departments throughout our client and must be detail-oriented to successfully manage multiple projects at the same time.
Track POAM and risk remediation activities and provide relevant metrics to communicate status and awareness.
Facilitate analysis, documentation and training of remediation actions in response to audit and assessment findings.
Serve as subject matter expert and lead efforts to utilize the ServiceNow GRC platform to support the IT GRC Program.
Contribute to the strategy, implementation and continuous improvement of the IT GRC Program.
Work proactively with the GRC Team to implement and manage regulatory and compliance program requirements in the GRC platform.
Cultivate relationships with other Divisions such as Information Security, R&D, Audit and Compliance, and business stakeholders to strengthen security governance and risk management.
Socialize and manage the awareness and adoption of IT GRC processes.
Must have the ability to work with little supervision, escalating issues as appropriate.
Create and help administer security training programs and practices. Perform other duties as assigned.
Other Information:
Greene Resources is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Apply

Company info

Sign Up Now - WashingtondcCrossing.com