Lead GRC (Governance Risk & Compliance)

• A proven track record of success in similar positions or roles.
• Experience with policy development and designing information security controls.
• Excellent communication skills and ability to navigate business and IT challenges with a focus on relationship management.
• A strong understanding of risk management methodologies, frameworks, and principles (e.g. NIST, ISO 27001, ISO9001, PCI, SOC 2, SOX, etc.)
• The ability to operate in a dynamic environment and handle numerous concurrent projects with urgency and ownership.
• Strong oral and written communication skills along with refined presentation skills and the ability to work with varying levels of management, including senior leadership.
• Experience with Security Best Practices for Cloud Infrastructures.
• Relevant industry certifications (CISA, CISSP, CISM, CRISC, CIA, ISO27001 Lead Implementer and Auditor etc.)

Tools / Skills

• ISO27001, ISO9001, HIPAA & HITECH,PCI DSS,Risk Assessment related tools