<p>Senior Specialist - CyberSecurity</p> <p>GRC Consultant<</p> <p>Activities<</p> <p>Liaise with business teams to ensure a comprehensive understanding of business processes and the mapped IT controls and testing procedures<</p> <p>Perform ITGC control Assessment in a timely manner validate the test artefacts and ensure that the test was performed correctly and ensure assessment is closed within time frame<</p> <p>Perform SOC report analysis identify gaps and highlight remediation measures if any<</p> <p>Ensure Compliance SLA adherence and timely Audit Support and manage External Audits<</p> <p>Drive and meet compliance program milestones such as SOX NIST ISO<</p> <p>Customer delivery mindset and very Strong Project management skills<</p> <p>Act as trusted advisor to the client and drive IT Risk compliance office to manage the entire Audit Compliance Risk Management Program<</p> <p>Stakeholder Management to communicate IT GRC issues and explaining those in Business language to Key member of the GRC Program at the Client<</p> <p>Conduct workshop sessions with the business and control owners and provide walkthrough of the<</p> <p>Management Communication and participating in all GRC related meetings and status reporting<</p> <p>Skills and expertise<</p> <p>Should have 8 years of experience in IT GRC with a good understanding of regulations standards including but not limited to SOX compliance NIST 80053 SOC2 and ISO 27001 GDPR<</p> <p>Exposure to IT GRC tools like Service Now OneTrust Risk Recon Microsoft eDiscovery among others<</p> <p>Expertise in Security principles Controls Testing Test of design and test of effectiveness Privacy regulations like complying to GDPR PII information etc Policy Procedures and Standards<</p> <p>Expertise in Security Risk Compliance Audit Management<</p> <p>Technology stacks<</p> <p>One Trust Risk Recon Microsoft eDiscovery Power BI MS Excel<</p> <p>Education<</p> <p>Essential<</p> <p>University degree Bachelors degree or equivalent experience in computer science information systems mathematics statistics or related field<</p> <p>Any one Security Certifications among ISO 27001 CISA CISM CEH CISSP CRISC CGEIT CISSP CCSK</p> <p>Louisville - Kentucky - USA10 - 16 Years10R11-Apr-2025NACTIVE1366258Mandatory Skills : Infra Vulnerability Management - Qualys, Infra Vulnerability Management - Rapid 7, Infra Vulnerability Management - Tenable IO, Infra Vulnerability Management - Tenable Nessus, SC, CS, Infra Vulnerability management/Triaging/ Remdiation Advisory / ServiceNow /ITSM /CMDB</p>