Only from Big 4 companies good experience in IT Field. SOC 1 and SOC 2 should be mentioned in the project section they should be working more than support role. Immediate or 15 days NP also is fine. GRC is remote location.
Job Description:
Work experience: 8 years
Location : Remote
Essential Duties and responsibilities:
Participate in governance risk and compliance related assessments policy and procedures awareness and training for end users change management internal control identification and measurement per applicable guidelines and frameworks
Conduct comprehensive security assessment and implementation support based on ISO 27001:2022 NIST 800 NIST CSF PCI DSS and HITRUST. Perform gap analysis identify risks and provide actionable recommendations for compliance and security improvement.
Lead risk methodology development and maintain updates and mapping of governance risk and compliance (GRC) assessments for changing requirements/criteria related to SOC1 SOC2 in addition to other regulatory or industry requirements
Work across matrix business environments both internal and external for risk and compliance (audit) readiness.
Work with business units in a consulting role to assist in their understanding of internal controls and measurements in addressing strategic initiatives business/client drivers and concerns future audits and compliance requirements.
Lead governance risk and compliance (GRC) liaison with internal and external audit resources external customers and government regulators domestic and international.
Actively support business units request for information and data security risk technology risk technical vendor relationship management product selection and design related to the authority and responsibility of GRC within an Enterprise Risk Management (ERM) model.
Promote a positive entrepreneurial consulting performance focused culture within organisation that works effectively with stakeholders in the development and launch of services and programs that support compliance and company growth.
Support the coordination tracking and reporting on divisional and business units metrics results data modelling processing calculating and transformation into meaningful risk metrics and reports.
nist csf,soc 1,pci dss,soc1,internal controls,risk management,data security,grc,audit,soc 2,vendor management,iso 27001:2022,risk assessment,soc2,governance,soc,hitrust,compliance,nist 800