Cyber Security Specialist

Job Summary

Responsible for managing Information Security Governance, Risk and Compliance (GRC) and Third-Party Risk Management (TPRM) activities. The role focuses on policy governance, information security risk assessments, regulatory compliance, vendor security due diligence, audit support, and oversight of technology vendors and outsourced service providers.

Job Description

• Manage Information Security Governance, Risk & Compliance (GRC) activities.
• Conduct enterprise-wide information security risk assessments and risk reviews.
• Develop, review, and maintain information security policies, standards, and procedures.
• Manage Third-Party Risk Management (TPRM) processes, including vendor security assessments.
• Perform security due diligence for technology vendors, partners, and outsourced service providers.
• Ensure compliance with regulatory, legal, and cybersecurity requirements.
• Coordinate internal and external audits and track remediation activities.
• Monitor risk treatment plans and ensure timely closure of identified gaps.
• Prepare risk, compliance, and governance reports for senior management.
• Collaborate with business, technology, procurement, legal, and compliance teams on security initiatives.
• Support cybersecurity awareness, governance reviews, and control assessments.
• Drive continuous improvement of security governance and risk management practices.

Profile Description

• 2-7 Years experience in Information Security Governance, Risk & Compliance (GRC).
• Hands-on expertise in Third-Party Risk Management (TPRM) and vendor security assessments.
• Good understanding of information security frameworks, standards, and regulatory requirements.
• Experience in IT risk assessment, control reviews, and risk mitigation planning.
• Knowledge of audit management, compliance monitoring, and remediation tracking.
• Ability to review and assess cloud, technology, and outsourcing-related risks.
• Strong stakeholder management and cross-functional collaboration skills.
• Experience in policy development, governance reporting, and compliance documentation.
• Excellent analytical, problem-solving, and communication skills.
• Ability to manage multiple security and compliance initiatives simultaneously.
• Self-driven professional with strong attention to detail and a risk-focused mindset.
• Preferred experience in cybersecurity governance within regulated environments.