Cybersecurity GRC Analyst
## Governance & Compliance:
Support the management of Information Security governance and ensure adherence to Cybersecurity policies and standards.
Familiar with compliance with financial regulations (SOX, SEC, CCPA/CRPA, GDPR, Australia Privacy Act)
Work closely with the IT Operations and Compliance team to identify, address, and resolve key Cybersecurity risks and issues promptly.
Assist in developing, implementing, and maintaining GRC policies, procedures and framework based on NIST 800-53.
Manage training and security awareness programs.
Conduct and manage periodic security testing activities (e.g. penetration testing, DR exercises), including training of DR participants on roles and duties.
Conduct and manage internal and external audits and certification and security questionnaire responses.
Assist in generating internal and external relevant security metrics and reports for CISO and Cybersecurity and audit committee
Stay updated on regulatory changes and advise on potential impacts
## Risk Management:
Perform risk assessments and identify gaps in financial and information security controls.
Develop and monitor risk mitigation plans in collaboration with key stakeholders.
Support third-party risk management (TPRM) process, ensuring vendor compliance with security standards.
Work with internal teams to assess and improve business continuity and incident response plans.
• *Looking for your next challenge? The world of crypto offers exciting roles in blockchain development, web3 innovations, and remote opportunities.**
Apply Now
Apply Now
Support the management of Information Security governance and ensure adherence to Cybersecurity policies and standards.
Familiar with compliance with financial regulations (SOX, SEC, CCPA/CRPA, GDPR, Australia Privacy Act)
Work closely with the IT Operations and Compliance team to identify, address, and resolve key Cybersecurity risks and issues promptly.
Assist in developing, implementing, and maintaining GRC policies, procedures and framework based on NIST 800-53.
Manage training and security awareness programs.
Conduct and manage periodic security testing activities (e.g. penetration testing, DR exercises), including training of DR participants on roles and duties.
Conduct and manage internal and external audits and certification and security questionnaire responses.
Assist in generating internal and external relevant security metrics and reports for CISO and Cybersecurity and audit committee
Stay updated on regulatory changes and advise on potential impacts
## Risk Management:
Perform risk assessments and identify gaps in financial and information security controls.
Develop and monitor risk mitigation plans in collaboration with key stakeholders.
Support third-party risk management (TPRM) process, ensuring vendor compliance with security standards.
Work with internal teams to assess and improve business continuity and incident response plans.
• *Looking for your next challenge? The world of crypto offers exciting roles in blockchain development, web3 innovations, and remote opportunities.**
Apply Now
Apply Now