Apply on Employer Site

abra · 17 hours ago

GRC Implementer

Center District, Center, IL

Full-time

Onsite

Mid Level

abra Professional Services is looking for a GRC Implementer who will be part of the Information Security team. The role involves implementing governance processes, managing risk, and ensuring regulatory compliance in the cyber domain while collaborating with various stakeholders.

Information TechnologyProduct DesignSoftware

Senior Management

Responsibilities

Implement GRC processes across the organization

Manage and monitor information security controls in accordance with organizational policies

Support the execution of risk assessments for systems and business processes

Work in compliance with regulations and standards relevant to the organization

Assist in preparing materials for internal and external audits

Collaborate with IT, Information Security, and business units

Manage vendor and supply chain assessments and address identified findings

Oversee and supervise subsidiary companies from a GRC perspective

Qualification

ISO 27001NISTPCI-DSSGRC systemsInformation security certificationsData privacy regulationsAnalytical skillsTeamwork skillsInterpersonal communicationAttention to detail

Required

Basic familiarity with information security standards (ISO 27001, NIST, PCI-DSS)

Basic understanding of Governance, Risk Management, and Compliance concepts

Proficiency in Microsoft Office applications

Strong teamwork skills and good interpersonal communication

Strong analytical skills and process-oriented thinking

High level of organization and attention to detail

Ability to learn independently

Service-oriented mindset and ability to work with multiple stakeholders

Preferred

Bachelor's degree in information systems, Computer Science, Information Technology Management, or relevant professional courses in Information Security

Experience working with GRC systems

Information security certifications (CISO Fundamentals, ISO Lead Implementer)

Knowledge of data privacy regulations (GDPR, Privacy Protection Law)