Back to Jobs

**Experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional**

Remote, USA Full-time Posted 2025-11-03
Join blithequark, a leading innovator in the field of cybersecurity, as a highly skilled and experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional. This exciting opportunity will allow you to contribute to the development and implementation of cutting-edge cybersecurity solutions, while working from the comfort of your own home. **About blithequark** blithequark is a pioneering company that has been at the forefront of the cybersecurity industry for years. Our team of experts is dedicated to providing innovative solutions that help organizations protect themselves against the ever-evolving threats of the digital world. With a strong focus on research and development, we are constantly pushing the boundaries of what is possible in the field of cybersecurity. **The Role** As a Full Stack Cybersecurity Specialist – GRC Professional, you will be responsible for guiding GRC-related activities and ensuring the smooth execution of various tasks within the team. Your primary focus will be on assisting blithequark's 3rd Party/ Internal Risk Control Software, as well as managing internal safety compliance requirements and the implementation of regulations, tactics, and frameworks at blithequark. **Key Responsibilities** * Assist in the management of blithequark's 3rd Party/ Internal Risk Control Software * Help the Walt Disney Agency's (TWDC) Global 3rd Party/ Internal Risk Method for wearing out cyber danger-related due diligence exams * Validate incoming 3rd Party/ Internal Risk Assessment Requests, working with business stakeholders to confirm the details of the request and the scope of the engagement * Coordinate the distribution of due diligence questionnaires to internal stakeholders/3rd Party, review submitted questionnaires for completeness, and decide dangers springing up from the contemporary design and operational effectiveness of the internal/3rd Party's security controls * File responses, associated findings, and remediation plans in the TWDC systems * Draft/review reviews for the checks performed and ensure respective business stakeholders finalize critiques * Be a strong liaison to ensure any queries are spoken back concerning the risk control technique and evaluation to the business or 3rd events as required * Carry out continuous tracking of the 3rd Party via TWDC systems for current/new findings and music any findings to closure * Perceive opportunities of improvement inside the TWDC systems and strategies * Paintings intensely with Chance Lead/Supervisor to time table and execute a spread of different assisting activities related to the chance management program **Governance, Threat, and Compliance** * Lead and help the improvement of cybersecurity hazard and compliance-related strategies to ensure treatment of cybersecurity chance consistent with the agency's threat urge for food * Maintain and document compliance towards information safety-associated guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks * Lead development and shipping of compliance and danger education and ongoing communications that assist power tradition of protection and compliance * Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications on the way to further pick out new key chance regions * Lead the sports to preserve and guide ISO 27001 popular **Competencies & Attributes for Fulfillment** * Understanding and competencies * Outstanding stakeholder management * Working understanding of information security-related high-quality practices and requirements consisting of ISO 2700x, SOC 2 necessities, SSAE 16/18 requirements, and many others * Experience in the control of hazard, controls, and compliance * Expertise of hazard evaluation methodologies – qualitative/quantitative * Super analytical and problem-solving abilities * Super presentation making and delivery abilities **Personal Attributes** * Robust interpersonal abilities * Ability to navigate rapid-paced surroundings and be bendy with working hours * Fantastic communication abilities, both verbal and written * Adapt speedily to converting conditions and power high-quality change **Preferred Training & Experience** * Applicable Bachelor's/Grasp's diploma from an accepted university or equivalent experience * 4 years of enjoy throughout 3rd Party risk control, records security, and audit & compliance tracking (minimum of 2-Three years in TPRM/Internal Audit) * Preferred revel in with a massive company and/or large four accounting company * One or greater credentials - CISA, CRISC, ISO27001 L./LI, CISSP * Experience in AI/ML is a plus **What We Offer** * A competitive salary of $80,000 per year * The opportunity to work from the comfort of your own home * A dynamic and innovative work environment * The chance to contribute to the development and implementation of cutting-edge cybersecurity solutions * A comprehensive benefits package, including health insurance, retirement savings, and paid time off * Opportunities for career growth and professional development * A collaborative and supportive team environment **How to Apply** If you are a highly skilled and experienced Full Stack Cybersecurity Specialist – GRC Professional looking for a new challenge, please submit your application, including your resume and a cover letter, to [insert contact information]. We look forward to hearing from you! Apply Job! Apply for this job    

Similar Jobs