Experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional
Join arenaflex, a leading innovator in the field of cybersecurity, as a highly skilled and experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional. As a key member of our Cybersecurity Team, you will play a vital role in guiding GRC-related activities and ensuring the smooth execution of various tasks within the team. If you are passionate about cybersecurity, risk management, and compliance, and have a strong desire to contribute to the enchanting world of arenaflex, we encourage you to apply for this exciting opportunity.
About arenaflex
arenaflex is a cutting-edge organization that specializes in providing innovative solutions in the field of cybersecurity. Our team of experts is dedicated to formulating and implementing techniques and recommendations to help organizations align with their commercial goals while dealing with risks correctly and meeting industry guidelines and standards. We work on slicing-edge technology and towards new innovations in the area of cybersecurity to ease the magic.
Key Responsibilities
As a Full Stack Cybersecurity Specialist – GRC Professional, you will be responsible for:
- Managing the internal safety compliance requirements and implementation of regulations, tactics, and frameworks at arenaflex.
- Assisting the arenaflex Cybersecurity Team in the execution of various tasks related to GRC activities.
- Validating incoming third-party/internal risk assessment requests, working with business stakeholders to confirm the details of the request and the scope of the engagement.
- Coordinating the distribution of due diligence questionnaires to internal stakeholders/third-party, reviewing submitted questionnaires for completeness, and identifying risks arising from the current design and operational effectiveness of internal/third-party security controls.
- Filing responses, associated findings, and remediation plans in the arenaflex systems.
- Drafting/reviewing reports for the checks performed and ensuring respective business stakeholders finalize reviews.
- Serving as a strong liaison to ensure any queries are responded to concerning the risk control technique and evaluation to the business or third parties as required.
- Conducting continuous tracking of third-party via arenaflex systems for current/new findings and escalating any findings to closure.
- Identifying opportunities for improvement within the arenaflex systems and strategies.
- Working intensely with Chance Lead/Supervisor to time-table and execute a range of different supporting activities related to the risk management program.
Governance, Threat, and Compliance
* Leading and assisting the improvement of cybersecurity risk and compliance-related strategies to ensure treatment of cybersecurity risk consistent with the organization's threat appetite.
- Maintaining and documenting compliance towards information security-related guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks.
- Leading the development and shipping of compliance and risk education and ongoing communications that assist power tradition of protection and compliance.
- Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications to further pinpoint new key risk areas.
- Leading the team to preserve and guide ISO 27001 certification.
Competencies & Attributes for Fulfillment
* Understanding and competencies in GRC-related activities.
- Outstanding stakeholder management.
- Working understanding of information security-related quality practices and requirements, including ISO 2700x, SOC 2 requirements, SSAE 16/18 requirements, and many others.
- Experience in the control of risk, controls, and compliance.
- Expertise of risk evaluation methodologies – qualitative/quantitative.
- Super analytical and problem-solving abilities.
- Super presentation making and delivery abilities.
Personal Attributes
* Robust interpersonal abilities.
- Ability to navigate rapid-paced environments and be flexible with working hours.
- Fantastic communication abilities, both verbal and written.
- Adapt speedily to converting conditions and power high-quality change.
Preferred Training & Experience
* Applicable Bachelor's/Master's degree from an accredited university or equivalent experience.
- 4 years of experience throughout third-party risk control, records security, and audit & compliance tracking (minimum of 2-3 years in TPRM/internal audit).
- Preferred experience with a large company and/or large four accounting company.
- One or greater credentials – CISA, CRISC, ISO27001 L./LI, CISSP.
- Experience in AI/ML is a plus.
About arenaflex Careers
We are looking for talented and motivated individuals who share our passion for cybersecurity, risk management, and compliance. If you are interested in joining our team, please submit your application, including your resume and a cover letter, to [insert contact information].
Why Join arenaflex?
* Competitive salary and benefits package.
- Opportunity to work with a leading innovator in the field of cybersecurity.
- Collaborative and dynamic work environment.
- Professional development and growth opportunities.
- Flexible working hours and remote work options.
How to Apply
If you are a motivated and experienced professional looking for a new challenge, please submit your application, including your resume and a cover letter, to [insert contact information]. We look forward to hearing from you! Apply Job! Apply for this job