**Experienced Full Stack GRC Professional – Cyber Protection & Compliance Specialist**
Join blithequark's dynamic team as a seasoned GRC professional in the field of cyber protection and compliance. We're seeking a highly skilled and experienced individual to guide GRC-related activities and ensure the seamless execution of various tasks within our crew. As a Cyber Protection & Compliance Specialist, you'll play a critical role in managing internal safety compliance requirements and implementing regulations, tactics, and frameworks at blithequark.
**About blithequark**
blithequark is a leading organization in the industry, dedicated to delivering innovative solutions and services that meet the evolving needs of our clients. Our team of experts is passionate about creating a secure and compliant environment, and we're committed to staying ahead of the curve in terms of technology and best practices. As a member of our team, you'll have the opportunity to work with a talented group of professionals who share your passion for excellence and your commitment to making a difference.
**Key Responsibilities**
As a Cyber Protection & Compliance Specialist, you'll be responsible for:
* Assisting the blithequark team in managing internal safety compliance requirements and implementing regulations, tactics, and frameworks
* Validating incoming third-party/internal risk assessment requests, working with business stakeholders to confirm the details of the request and the scope of the engagement
* Coordinating the distribution of due diligence questionnaires to internal stakeholders/third parties, reviewing submitted questionnaires for completeness, and identifying potential risks arising from the current design and operational effectiveness of internal/third-party security controls
* Filing responses, associated findings, and remediation plans in blithequark's systems
* Drafting/reviewing reports for the checks performed and ensuring respective business stakeholders finalize reviews
* Serving as a strong liaison to ensure any queries are responded to concerning the risk control technique and evaluation to the business or third parties as required
* Conducting continuous tracking of third-party vendors via blithequark systems for current/new findings and escalating any findings to closure
* Identifying opportunities for improvement within blithequark systems and strategies
* Working closely with the Chance Lead/Supervisor to schedule and execute a range of supporting activities related to the risk management program
**Governance, Threat, and Compliance**
As a Cyber Protection & Compliance Specialist, you'll also be responsible for:
* Leading and assisting the development of cybersecurity risk and compliance-related strategies to ensure the treatment of cybersecurity risk consistent with the organization's risk appetite
* Maintaining and documenting compliance towards information security-related guidelines and processes through planning, testing, remediating, tracking, and reporting on control reviews and risk assessments
* Leading the development and delivery of compliance and risk education and ongoing communications that assist in the promotion of a culture of protection and compliance
* Staying up-to-date with regulatory changes, new guidelines, technology, and internal policy modifications to further identify new key risk areas
* Leading the team to preserve and maintain ISO 27001 certification
**Competencies & Attributes for Success**
To be successful in this role, you'll need to possess:
* Strong understanding and competencies in GRC, cybersecurity, and compliance
* Outstanding stakeholder management skills
* Working knowledge of information security-related best practices and requirements, including ISO 27001, SOC 2 requirements, SSAE 16/18 requirements, and others
* Experience in the control of risk, controls, and compliance
* Expertise in risk evaluation methodologies – qualitative/quantitative
* Super analytical and problem-solving abilities
* Super presentation-making and delivery abilities
**Personal Attributes**
As a Cyber Protection & Compliance Specialist, you'll need to possess:
* Robust interpersonal skills
* Ability to navigate rapid-paced environments and be flexible with working hours
* Fantastic communication skills, both verbal and written
* Ability to adapt quickly to changing conditions and promote quality change
**Preferred Qualifications & Experience**
* Applicable Bachelor's/Master's degree from an accredited university or equivalent experience
* 4 years of experience in third-party risk control, records security, and audit & compliance tracking (minimum of 2-3 years in TPRM/internal audit)
* Preferred experience with a large company and/or a Big Four accounting company
* One or more certifications – CISA, CRISC, ISO27001 LA, CISSP
* Experience in AI/ML is a plus
**About the Role**
As a Cyber Protection & Compliance Specialist, you'll have the opportunity to work on a wide range of projects and initiatives, from risk assessments and compliance reviews to education and training programs. You'll be part of a dynamic team that is passionate about creating a secure and compliant environment, and you'll have the chance to make a real difference in the organization.
**What We Offer**
* Competitive salary and benefits package
* Opportunity to work with a talented team of professionals
* Flexible working arrangements, including remote work options
* Professional development and training opportunities
* Collaborative and dynamic work environment
**How to Apply**
If you're a motivated and experienced professional looking for a new challenge, we encourage you to apply for this exciting opportunity. Please submit your resume and a cover letter outlining your qualifications and experience. We can't wait to hear from you!
Apply Job!
For more such jobs please click here!
Apply for this job