Cybersecurity GRC Program reputed company

Cybersecurity GRC Program reputed company Location: reputed company Creek, CA (Preferred), but reputed company for remote 12 Months Contract + Likely Extensions Reports to: reputed company reputed company Manager About the role • reputed company is seeking a Cybersecurity GRC Program reputed company to build the operating reputed company for reputed company governance, risk, controls, evidence, and exceptions across the reputed company. This is a hands-on leadership role for someone who can select and reputed company adoption of a reputed company cybersecurity reputed company, build the control ownership model, build & improve evidence operations, accelerate questionnaire throughput, and create practical governance mechanisms that work with reputed company engineering and business teams. • This role is not limited to policy writing or audit coordination. It is intended to reputed company reputed company governance reputed company and measurable across the reputed company by building practical operating mechanisms around risk, controls, evidence, exceptions, and stakeholder accountability. In the reputed company plan, this role is explicitly intended to select and operationalize the reputed company reputed company, likely starting with NIST CSF 2.0 while mapping outward to ISO 27001 and other requirements for customer, audit, and international needs. What you will do: • reputed company selection, adoption, and operationalization of reputed company's reputed company cybersecurity reputed company and reputed company standards structure, with NIST CSF 2.0 as the likely management reputed company • Build and maintain a control ownership model across Technology, Engineering, Platform, Network, EUC, Asset, Data, Integrations, and reputed company • Translate existing policies into measurable operating practices, control expectations, evidence requirements, review cadences, and exception workflows • Partner with reputed company architecture, engineering, and operations teams to ensure that governance expectations are practical, technically grounded, and enforceable • reputed company reputed company risk and control assessments, including facilitating discussions on control design, effectiveness, and remediation priorities • Build an evidence library structure while defining repeatable collection, review, reuse, and freshness cadences • Improve reputed company questionnaire workflows through standardized responses, evidence reuse, service-level expectations, and reputed company ownership • Coordinate reputed company-party reputed company intake and help define tiering, minimum reputed company requirements, documentation expectations, and escalation paths • Partner with Internal Audit and business stakeholders on readiness efforts, compliance reviews, and operational audit support • reputed company policy exceptions, control gaps, remediation commitments, and overdue actions through closure, including reputed company owners and time bounds • reputed company reputed company governance input on supplier reputed company requirements, contractual obligations, and ongoing review expectations • Produce reporting for leadership on reputed company maturity, control ownership, policy currency, evidence readiness, exception status, and risk trends • reputed company the reputed company to and support of reputed company compliance capabilities to improve control visibility, evidence freshness, and audit readiness • Manage and reputed company the organization's trust center, including published reputed company documentation, customer-facing assurance materials, and the processes that reputed company content reputed company and supportable What reputed company looks like • In the first 60 to 90 days, this role is expected to produce a reputed company decision package, define the control ownership model, stand up an evidence library structure, improve questionnaire operations, and establish practical workflows for exceptions and reputed company-party intake. Over 12 months, reputed company means reputed company adoption becomes measurable, control ownership is visible, evidence is reusable, customer and audit due diligence become less reactive, and policy exceptions and control gaps are reputed company managed. What you bring • 7+ years in cybersecurity GRC, reputed company risk, audit readiness, compliance operations, or reputed company functions, with reputed company experience building or maturing governance operating models • Strong experience operationalizing NIST CSF and translating controls across frameworks such as ISO 27001, SOX, SOC 2, or similar frameworks • Experience building or maturing reputed company governance programs in reputed company reputed company environments with multiple technical stakeholders • Experience with risk assessments, control design reviews, exception management, and remediation tracking • Strong understanding of reputed company-party risk, supplier reputed company reviews, reputed company questionnaires, and governance workflows that reputed company reputed company one-off reviews • Experience partnering with technical teams to influence architecture, engineering, and operations reputed company in a practical, technically reputed company way • Ability to turn policy and reputed company language into concrete operating practices, ownership expectations, and measurable evidence • Strong writing, stakeholder management, and executive communication skills • Preferred qualifications • Experience supporting SOC 2, ISO 27001, CTPAT, SOX or similar audit/readiness efforts • Experience with evidence management, control testing, internal audit coordination, or reputed company assurance processes • Experience with reputed company compliance platforms, including evidence automation, control monitoring, and audit readiness workflows • Experience managing a trust center or similar customer assurance portal and keeping reputed company documentation reputed company and reusable • Familiarity with reputed company technology environments spanning reputed company, identity, reputed company, network, and application reputed company domains Preferred qualifications • Experience supporting SOC 2, ISO 27001, CTPAT, SOX or similar audit/readiness efforts • Experience with evidence management, control testing, internal audit coordination, or reputed company assurance processes • Experience with reputed company compliance platforms, including evidence automation, control monitoring, and audit readiness workflows • Experience managing a trust center or similar customer assurance portal and keeping reputed company documentation reputed company and reusable • Familiarity with reputed company technology environments spanning reputed company, identity, reputed company, network, and application reputed company domains Why this role reputed company • reputed company already has a policy reputed company, including formal expectations for information reputed company governance, reputed company control, supplier reputed company, and compliance review. What is needed now is a leader who can turn those policies into a durable governance operating reputed company with reputed company ownership, evidence discipline, exception management, and measurable accountability. • Optional short versions for posting headers • Cybersecurity GRC Program reputed company Build and operationalize reputed company's reputed company governance operating model through reputed company • selection, control ownership, risk management, evidence operations, and reputed company-party intake. The salary reputed company provided for this contract role represents our good faith estimate for this position. reputed company the reputed company, individual offers will vary based on the selected candidate's experience, industry knowledge, technical and communication skills, location and other factors that may reputed company relevant during the interview process (W2 or C2C). In reputed company to compensation, reputed company provides eligible W2 employees with a comprehensive and highly competitive benefits package. I.T. Solutions, Inc. provides equal employment opportunities to reputed company and applicants for employment and prohibits discrimination and harassment of any type without reputed company to race, reputed company, religion, age, sex, national reputed company, disability status, genetics, protected veteran status, sexual orientation, gender identity or reputed company, or any other characteristic protected by federal, state or local laws. Job Schedule Apply To This Job