GRC & Security Specialist - Remote

Overview

The GRC & Security Specialist will play a crucial role in automating compliance processes and enhancing security measures within a dynamic startup environment.

In Short

• Automate access revocation workflows for secure offboarding.
• Support email security configuration and monitoring.
• Track and triage InfoSec alerts, contributing to audit playbooks.
• Maintain controls and evidence for compliance frameworks.
• Manage risk register and participate in risk reviews.
• Create tasks for compliance requirements in the platform.
• Conduct vendor security reviews and ongoing monitoring.
• Refine internal playbooks for InfoSec and GRC processes.

Requirements

• ISO27001 Lead Auditor or similar certifications.
• Experience with internal and external audits.
• Must be based on the East Coast of the US.
• Interest in GRC, InfoSec, or IT operations.
• Knowledge of compliance frameworks like SOC 2 or ISO 27001.
• Familiarity with cloud environments and cybersecurity.
• Proactive with strong task management skills.
• Comfortable in a startup culture.
• Strong communication and documentation skills.

Benefits

• Opportunity to shape the future of GRC solutions.
• Professional development and growth opportunities.
• Collaborative and adaptable work culture.
• Valued contributions and ideas.