GRC

GRC Specialist Cybersecurity Controls

Experience: 5+ Years
Role: GRC Specialist / Cybersecurity GRC
Domain: Cybersecurity, Risk & Compliance

Job Overview

We are looking for a GRC Specialist with strong experience in cybersecurity controls, control testing, evidence validation, risk assessments, and audit support. The role will involve working closely with technology and security teams to assess the effectiveness of cybersecurity controls and ensure alignment with regulatory and organizational requirements.

Key Responsibilities

• Perform cybersecurity control assessments, testing, and effectiveness reviews.
• Validate security controls and supporting evidence for audit and compliance requirements.
• Assess controls across Cryptography/PKI, DLP, Endpoint Security, and Network Security.
• Identify control gaps, weaknesses, risks, and recommend remediation actions.
• Manage cybersecurity due diligence questionnaires from clients, vendors, and partners.
• Coordinate with internal stakeholders to collect and validate technical evidence.
• Support internal, regulatory, and external audits, including evidence collection and remediation tracking.
• Interpret cybersecurity requirements and translate them into technical control expectations and validation approaches.
• Maintain accurate documentation, reporting, and control assessment records.
• Track risks, remediation activities, questionnaires, and compliance requirements.
• Stay updated on cybersecurity threats, regulatory requirements, and industry best practices.

Required Skills

• 5+ years of experience in Cybersecurity GRC, Cyber Control Testing, Security Control Assessment, or a similar role.

• Strong understanding of cybersecurity controls and control effectiveness assessment.

• Hands-on knowledge of:

• Cryptography & PKI

• TLS / Certificates

• Data Loss Prevention (DLP)

• Endpoint Security

• Network Security

• Experience with ISO 27001, NIST CSF, and CIS Controls.

• Strong experience in evidence validation, audit support, risk assessment, and compliance activities.

• Excellent analytical, documentation, communication, and stakeholder management skills.

Good to Have

• Experience with ServiceNow GRC, IBM OpenPages, RSA Archer, or MetricStream.
• Exposure to AWS/Azure security controls.
• Experience with automation or scripting for evidence collection.
• Certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer.

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.

Interested candidates can apply with their updated resume.