Experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional
Join arenaflex, a leading innovator in the field of cybersecurity, as a highly skilled and experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional. This exciting opportunity allows you to contribute to the development and implementation of cutting-edge cybersecurity solutions, while working remotely in a part-time or full-time capacity.
About arenaflex
arenaflex is a renowned organization that has been at the forefront of innovation and excellence in the field of cybersecurity for years. Our team of experts is dedicated to providing top-notch solutions that protect our clients' sensitive information and ensure their peace of mind. With a strong focus on governance, risk, and compliance, we strive to stay ahead of the curve in the ever-evolving landscape of cybersecurity threats.
The Role
As a Full Stack Cybersecurity Specialist – GRC Professional, you will be responsible for guiding GRC-related activities and ensuring the smooth execution of various tasks within the team. Your primary focus will be on assisting arenaflex's 3rd Party/ Internal Threat Control Software, managing internal safety compliance requirements, and implementing regulations, tactics, and frameworks at arenaflex.
Key Responsibilities
* Assist in the development and implementation of arenaflex's 3rd Party/ Internal Threat Control Software
- Help manage internal safety compliance requirements and ensure adherence to regulatory standards
- Validate incoming 3rd Party/Internal Threat Assessment Requests and coordinate with business stakeholders to confirm the details of the request and the scope of the engagement
- Coordinate the distribution of due diligence questionnaires to internal stakeholders/3rd parties, review submitted questionnaires for completeness, and identify potential risks arising from the current design and operational effectiveness of internal/3rd party security controls
- File responses, associated findings, and remediation plans in arenaflex's systems
- Draft/review reviews for the checks performed and ensure respective business stakeholders finalize critiques
- Serve as a strong liaison to ensure any queries are responded to concerning the risk control technique and evaluation to the business or 3rd parties as required
- Conduct continuous tracking of 3rd parties via arenaflex's systems for current/new findings and escalate any findings to closure
- Identify opportunities for improvement within arenaflex's systems and strategies
- Work closely with the Chance Lead/Supervisor to timetable and execute a range of supporting activities related to the risk management program
Governance, Threat, and Compliance
* Lead and assist in the improvement of cybersecurity risk and compliance-related strategies to ensure treatment of cybersecurity risk consistent with the agency's threat appetite
- Maintain and document compliance towards information security-related guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks
- Lead development and shipping of compliance and danger education and ongoing communications that assist power tradition of protection and compliance
- Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications to further pinpoint new key risk areas
- Lead the team to preserve and guide ISO 27001 certification
Competencies & Attributes for Fulfillment
* Understanding and competencies in governance, risk, and compliance
- Outstanding stakeholder management
- Working understanding of information security-related best practices and requirements, including ISO 2700x, SOC 2 requirements, SSAE 16/18 requirements, and others
- Experience in the control of risk, controls, and compliance
- Expertise of risk evaluation methodologies – qualitative/quantitative
- Super analytical and problem-solving abilities
- Super presentation making and delivery abilities
Personal Attributes
* Robust interpersonal abilities
- Ability to navigate rapid-paced environments and be flexible with working hours
- Fantastic communication abilities, both verbal and written
- Adapt quickly to converting conditions and power high-quality change
Preferred Qualifications & Experience
* Applicable Bachelor's/Master's degree from an accredited university or equivalent experience
- 4 years of experience throughout 3rd Party Risk Control, Records Security, and Audit & Compliance Tracking (minimum of 2-3 years in TPRM/Internal Audit)
- Preferred experience with a large company and/or large four accounting company
- One or greater credentials – CISA, CRISC, ISO27001 L./LI, CISSP
- Experience in AI/ML is a plus
Why Join arenaflex?
* Competitive salary of $80,000 per year
- Opportunity to work remotely in a part-time or full-time capacity
- Collaborative and dynamic work environment
- Professional development and growth opportunities
- Comprehensive benefits package, including health insurance, retirement plan, and paid time off
How to Apply
If you are a highly skilled and experienced Full Stack Cybersecurity Specialist – GRC Professional looking for a new challenge, please submit your application, including your resume and a cover letter, to [insert contact information]. We look forward to hearing from you!
About arenaflex Careers
At arenaflex, we are committed to providing a supportive and inclusive work environment that fosters growth and development. We believe in the importance of continuous learning and professional development, and we offer a range of training and development opportunities to help our employees achieve their career goals.
Tips for a Successful Interview
* Be prepared to talk about your professional heritage, capabilities, and reviews
- Show enthusiasm for the role and the organization
- Highlight your relevant qualifications, experiences, and skills
- Demonstrate your problem-solving and analytical abilities
- Showcase your communication and interpersonal skills
- Ask thoughtful and relevant questions during the interview
What to Expect in the Interview Process
* A comprehensive interview with a member of our recruitment team
- A presentation or case study to assess your problem-solving and analytical abilities
- A skills assessment or technical test to evaluate your technical skills
- A panel interview with multiple members of our team
- A final interview with a member of our leadership team
Why arenaflex is a Great Place to Work
* arenaflex is a leading innovator in the field of cybersecurity
- We offer a competitive salary and comprehensive benefits package
- We provide opportunities for professional development and growth
- We have a collaborative and dynamic work environment
- We are committed to providing a supportive and inclusive work environment
How to Prepare for the Interview
* Research the organization and the role
- Review your resume and cover letter
- Practice your responses to common interview questions
- Prepare examples of your relevant experiences and skills
- Ask thoughtful and relevant questions during the interview
What to Wear to the Interview
* Business casual attire is recommended
- Avoid wearing jeans or t-shirts
- Make sure your clothes are clean and ironed
- Pay attention to grooming and personal hygiene
- Be confident and professional in your appearance
How to Follow Up After the Interview
* Send a thank-you note or email to the interviewer
- Express your gratitude for the opportunity to interview
- Reiterate your interest in the role and the organization
- Provide any additional information or clarification
- Follow up with a phone call or email to confirm your interest in the role
Apply for this job