Lead GRC (Governance, Risk & Compliance)

Job Description

A proven track record of success in similar positions or roles.

Experience with policy development and designing information security controls.

Excellent communication skills and ability to navigate business and IT challenges with a focus on relationship management.

A strong understanding of risk management methodologies, frameworks, and principles (e.g. NIST, ISO 27001, ISO9001, PCI, SOC 2, SOX, etc.)

The ability to operate in a dynamic environment and handle numerous concurrent projects with urgency and ownership.

Strong oral and written communication skills along with refined presentation skills and the ability to work with varying levels of management, including senior leadership.

Experience with Security Best Practices for Cloud Infrastructures.

Relevant industry certifications (CISA, CISSP, CISM, CRISC, CIA, ISO27001 Lead Implementer and Auditor etc.)

Tools / Skills:

ISO27001

ISO9001

HIPAA & HITECH

PCI DSS

Risk Assessment related tools