Overview
We are looking for an experienced Senior Information Security GRC Specialist to support our growing cyber security function. In this hybrid role, you'll work closely with the Head of Security GRC & Deputy CISO to enhance security governance and compliance. This position emphasizes the development of security policies, third-party risk management, and effective communication with stakeholders across various levels of the organization.
Responsibilities
- Develop and implement security governance frameworks and policies.
- Manage third-party risk assessments and compliance activities.
- Oversee the risk management processes and ensure alignment with regulatory requirements.
- Collaborate with various stakeholders to influence security practices and compliance measures.
- Report on compliance metrics and governance activities to senior leadership.
Requirements
- 10+ years of experience in Information Security with a focus on GRC.
- Strong knowledge of security frameworks such as NIST and GDPR.
- Experience in risk management and third-party risk assessment.
- Proven leadership capabilities with effective stakeholder management skills.
- Experience in regulated environments such as insurance or financial services is preferred.