Apply on Employer Site

abra · 4 hours ago

GRC Implementer (Information Security Team)

Center District, Center, IL

Full-time

Onsite

New Grad, Entry Level

abra professional services is seeking a GRC Implementer to join their Information Security team. The GRC Implementer will be responsible for risk management, regulatory and standards compliance, and implementing cybersecurity governance processes while collaborating with internal and external stakeholders.

Information TechnologyProduct DesignSoftware

Senior Management

Responsibilities

Implementing GRC processes across the organization

Managing and monitoring information security controls in accordance with organizational policies

Supporting the execution of risk assessments for systems and business processes

Ensuring compliance with relevant regulations and standards applicable to the organization

Assisting in the preparation of internal and external audit materials

Working closely with IT teams, Information Security teams, and business units

Managing supplier/security questionnaires and addressing findings within the supply chain

Overseeing and supervising subsidiary companies from a governance and compliance perspective

Qualification

ISO 27001NISTPCI-DSSGovernanceRisk ManagementCompliance (GRC)Microsoft Office applicationsGRC systems/toolsData privacy regulationsAnalytical skillsOrganizationLearn independentlyService-oriented mindsetAttention to detail

Required

Basic familiarity with information security standards such as ISO 27001, NIST, and PCI-DSS

Basic understanding of Governance, Risk Management, and Compliance (GRC) concepts

Proficiency in Microsoft Office applications

Strong teamwork skills and good interpersonal communication abilities

Strong analytical skills and ability to understand organizational processes

High level of organization and attention to detail

Ability to learn independently

Service-oriented mindset and ability to work with multiple stakeholders and interfaces

Preferred

Bachelor's degree in Information Systems, Computer Science, Information Technology Management, or relevant professional training in information security

Experience working with GRC systems/tools

Information security certifications such as CISO Fundamentals or ISO 27001 Lead Implementer

Knowledge of data privacy regulations, including GDPR and local data protection laws